Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2022-12-13 CVE-2022-20483 Integer Underflow (Wrap or Wraparound) vulnerability in Google Android
In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer overflows.
network
low complexity
google CWE-191
7.5
2022-12-13 CVE-2022-20484 Allocation of Resources Without Limits or Throttling vulnerability in Google Android
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion.
local
low complexity
google CWE-770
7.8
2022-12-13 CVE-2022-20485 Allocation of Resources Without Limits or Throttling vulnerability in Google Android
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion.
local
low complexity
google CWE-770
7.8
2022-12-13 CVE-2022-20486 Allocation of Resources Without Limits or Throttling vulnerability in Google Android
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion.
local
low complexity
google CWE-770
7.8
2022-12-13 CVE-2022-20487 Allocation of Resources Without Limits or Throttling vulnerability in Google Android
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion.
local
low complexity
google CWE-770
7.8
2022-12-13 CVE-2022-20488 Improper Validation of Specified Quantity in Input vulnerability in Google Android
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion.
local
low complexity
google CWE-1284
7.8
2022-12-13 CVE-2022-20491 Improper Validation of Specified Quantity in Input vulnerability in Google Android
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion.
local
low complexity
google CWE-1284
7.8
2022-12-13 CVE-2022-20495 Unspecified vulnerability in Google Android
In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility service due to a logic error in the code.
local
low complexity
google
7.8
2022-12-13 CVE-2022-20501 Improper Restriction of Rendered UI Layers or Frames vulnerability in Google Android
In onCreate of EnableAccountPreferenceActivity.java, there is a possible way to mislead the user into enabling a malicious phone account due to a tapjacking/overlay attack.
local
low complexity
google CWE-1021
7.3
2022-12-13 CVE-2022-20611 Incorrect Default Permissions vulnerability in Google Android
In deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass carrier restrictions due to a permissions bypass.
local
low complexity
google CWE-276
7.8