Vulnerabilities > Google

DATE CVE VULNERABILITY TITLE RISK
2024-06-13 CVE-2024-32906 Use of Uninitialized Resource vulnerability in Google Android
In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data.
local
low complexity
google CWE-908
7.8
2024-06-13 CVE-2024-32907 Classic Buffer Overflow vulnerability in Google Android
In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation.
local
low complexity
google CWE-120
7.8
2024-06-13 CVE-2024-32908 Race Condition vulnerability in Google Android
In sec_media_protect of media.c, there is a possible permission bypass due to a race condition.
local
low complexity
google CWE-362
7.8
2024-06-13 CVE-2024-32909 Out-of-bounds Write vulnerability in Google Android
In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow.
local
low complexity
google CWE-787
7.8
2024-06-13 CVE-2024-32910 Use of Uninitialized Resource vulnerability in Google Android
In handle_msg_shm_map_req of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data.
local
low complexity
google CWE-908
5.5
2024-06-13 CVE-2024-32911 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Google Android
There is a possible escalation of privilege due to improperly used crypto.
network
low complexity
google CWE-327
critical
9.8
2024-06-13 CVE-2024-32912 Unspecified vulnerability in Google Android
there is a possible persistent Denial of Service due to test/debugging code left in a production build.
local
low complexity
google
5.5
2024-06-13 CVE-2024-32913 Integer Overflow or Wraparound vulnerability in Google Android
In wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an integer overflow.
network
low complexity
google CWE-190
critical
9.8
2024-06-13 CVE-2024-32918 Improper Privilege Management vulnerability in Google Android
Permission Bypass allowing attackers to disable HDCP 2.2 encryption by not completing the HDCP Key Exchange initialization steps
low complexity
google CWE-269
6.1
2024-06-11 CVE-2024-5830 Type Confusion vulnerability in multiple products
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
network
low complexity
google fedoraproject CWE-843
8.8