Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2022-04-11 CVE-2022-27824 Out-of-bounds Read vulnerability in Google Android 10.0/11.0/12.0
Improper size check of in sapefd_parse_meta_DESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file
local
low complexity
google CWE-125
7.1
2022-04-11 CVE-2022-27825 Out-of-bounds Read vulnerability in Google Android 10.0/11.0/12.0
Improper size check in sapefd_parse_meta_HEADER function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file.
local
low complexity
google CWE-125
7.1
2022-04-11 CVE-2022-27826 Improper Input Validation vulnerability in Google Android 10.0/11.0/12.0
Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
local
low complexity
google CWE-20
7.8
2022-04-11 CVE-2022-27827 Improper Input Validation vulnerability in Google Android 10.0/11.0/12.0
Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
local
low complexity
google CWE-20
7.8
2022-04-11 CVE-2022-27828 Improper Input Validation vulnerability in Google Android 10.0/11.0/12.0
Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
local
low complexity
google CWE-20
7.8
2022-04-11 CVE-2022-27829 Improper Input Validation vulnerability in Google Android 10.0/11.0/12.0
Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
local
low complexity
google CWE-20
7.8
2022-04-11 CVE-2022-27830 Improper Input Validation vulnerability in Google Android 10.0/11.0/12.0
Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
local
low complexity
google CWE-20
7.8
2022-04-11 CVE-2022-27833 Integer Overflow or Wraparound vulnerability in Google Android 10.0/11.0/12.0
Improper input validation in DSP driver prior to SMR Apr-2022 Release 1 allows out-of-bounds write by integer overflow.
local
low complexity
google CWE-190
7.8
2022-04-11 CVE-2022-27834 Use After Free vulnerability in Google Android 10.0/11.0/12.0
Use after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform malicious actions.
local
high complexity
google CWE-416
7.0
2022-04-11 CVE-2022-27835 Out-of-bounds Write vulnerability in Google Android 12.0
Improper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory write.
local
low complexity
google CWE-787
7.8