Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2023-03-24 CVE-2022-20542 Improper Input Validation vulnerability in Google Android 13.0
In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-20
7.8
2023-03-24 CVE-2023-20906 Unspecified vulnerability in Google Android
In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission after a Target SDK update due to a permissions bypass.
local
low complexity
google
7.8
2023-03-24 CVE-2023-20911 Resource Exhaustion vulnerability in Google Android
In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due to resource exhaustion.
local
low complexity
google CWE-400
7.8
2023-03-24 CVE-2023-20917 Unspecified vulnerability in Google Android
In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the code.
local
low complexity
google
7.8
2023-03-24 CVE-2023-20931 Out-of-bounds Write vulnerability in Google Android
In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow.
local
low complexity
google CWE-787
7.8
2023-03-24 CVE-2023-20936 Out-of-bounds Write vulnerability in Google Android
In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
7.8
2023-03-24 CVE-2023-20947 Unspecified vulnerability in Google Android 12.0/12.1/13.0
In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to a permissions bypass.
local
low complexity
google
7.8
2023-03-24 CVE-2023-20953 Unspecified vulnerability in Google Android 13.0
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to incorrect UI being shown prior to setup completion.
local
low complexity
google
7.8
2023-03-24 CVE-2023-20955 Missing Authorization vulnerability in Google Android
In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to a missing permission check.
local
low complexity
google CWE-862
7.8
2023-03-24 CVE-2023-20957 Unspecified vulnerability in Google Android 11.0/12.0/12.1
In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confused deputy.
local
low complexity
google
7.8