Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2022-09-09 CVE-2022-36860 Out-of-bounds Write vulnerability in Google Android 10.0/11.0/12.0
A heap-based overflow vulnerability in LoadEnvironment function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
local
low complexity
google CWE-787
7.8
2022-09-09 CVE-2022-36862 Out-of-bounds Write vulnerability in Google Android 10.0/11.0/12.0
A heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
local
low complexity
google CWE-787
7.8
2022-09-09 CVE-2022-36863 Out-of-bounds Write vulnerability in Google Android 10.0/11.0/12.0
A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
local
low complexity
google CWE-787
7.8
2022-09-09 CVE-2022-39119 Missing Authorization vulnerability in Google Android 10.0/11.0/12.0
In network service, there is a missing permission check.
local
low complexity
google CWE-862
7.8
2022-09-06 CVE-2022-26469 Unsafe Reflection vulnerability in Google Android 11.0/12.0
In MtkEmail, there is a possible escalation of privilege due to fragment injection.
local
low complexity
google CWE-470
7.8
2022-08-24 CVE-2021-0891 Improper Privilege Management vulnerability in Google Android
An unprivileged app can trigger PowerVR driver to return an uninitialized heap memory causing information disclosure.Product: AndroidVersions: Android SoCAndroid ID: A-236849490
network
low complexity
google CWE-269
7.5
2022-08-24 CVE-2021-0946 Missing Initialization of Resource vulnerability in Google Android
The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap, fills the contents of the buffer via PMR_PDumpSymbolicAddr, and then copies the buffer to userspace.
network
low complexity
google CWE-909
7.5
2022-08-24 CVE-2021-0947 Missing Initialization of Resource vulnerability in Google Android
The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents of the buffer via TLServerDiscoverStreamsKM, and then copies the buffer to userspace.
network
low complexity
google CWE-909
7.5
2022-08-12 CVE-2022-2603 Use After Free vulnerability in multiple products
Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
8.8
2022-08-12 CVE-2022-2604 Use After Free vulnerability in multiple products
Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
8.8