Vulnerabilities > Google > Android > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-09-18 CVE-2020-0265 Missing Authorization vulnerability in Google Android 11.0
In Telephony, there are possible leaks of sensitive data due to missing permission checks.
local
low complexity
google CWE-862
5.5
2020-09-18 CVE-2020-0263 Unspecified vulnerability in Google Android 11.0
In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent.
local
low complexity
google
5.5
2020-09-18 CVE-2020-0318 Improper Handling of Exceptional Conditions vulnerability in Google Android 11.0
In the System UI, there is a possible system crash due to an uncaught exception.
local
low complexity
google CWE-755
5.5
2020-09-17 CVE-2020-0426 Unspecified vulnerability in Google Android 11.0
In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent.
local
low complexity
google
5.5
2020-09-17 CVE-2020-0425 Unspecified vulnerability in Google Android 11.0
There is a possible way to view notifications even when the "Lockdown" feature is on.
local
low complexity
google
5.5
2020-09-17 CVE-2020-0373 Out-of-bounds Read vulnerability in Google Android 11.0
In SoundTriggerHwService, there is a possible out of bounds read due to a race condition.
local
high complexity
google CWE-125
4.7
2020-09-17 CVE-2020-0372 Missing Authorization vulnerability in Google Android 11.0
In ActivityManager, there is a possible access to protected data due to a missing permission check.
local
low complexity
google CWE-862
5.5
2020-09-17 CVE-2020-0370 Out-of-bounds Read vulnerability in Google Android 11.0
In libAACdec, there is a possible out of bounds read due to missing bounds check.
network
low complexity
google CWE-125
6.5
2020-09-17 CVE-2020-0364 Out-of-bounds Read vulnerability in Google Android 11.0
In libDRCdec, there is a possible out of bounds read due to a missing bounds check.
network
low complexity
google CWE-125
6.5
2020-09-17 CVE-2020-0363 Improper Input Validation vulnerability in Google Android 11.0
In libmedia, there is a possible resource exhaustion due to improper input validation.
network
low complexity
google CWE-20
6.5