Vulnerabilities > Google > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-12-16 | CVE-2022-20603 | Out-of-bounds Write vulnerability in Google Android In SetDecompContextDb of RohcDeCompContextOfRbId.cpp, there is a possible out of bounds write due to a missing bounds check. | 7.2 |
2022-12-16 | CVE-2022-20605 | Out-of-bounds Read vulnerability in Google Android In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check. | 7.5 |
2022-12-16 | CVE-2022-20607 | Out-of-bounds Write vulnerability in Google Android In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. | 8.8 |
2022-12-16 | CVE-2022-20610 | Out-of-bounds Read vulnerability in Google Android In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. | 8.8 |
2022-12-16 | CVE-2022-42524 | Out-of-bounds Read vulnerability in Google Android In sms_GetTpUdlIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. | 7.5 |
2022-12-16 | CVE-2022-42527 | Unspecified vulnerability in Google Android In cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check. | 7.5 |
2022-12-16 | CVE-2022-42531 | Allocation of Resources Without Limits or Throttling vulnerability in Google Android In mmu_map_for_fw of gs_ldfw_load.c, there is a possible mitigation bypass due to Permissive Memory Allocation. | 7.8 |
2022-12-16 | CVE-2022-42534 | Improper Input Validation vulnerability in Google Android In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input validation. | 7.8 |
2022-12-16 | CVE-2022-42544 | Injection vulnerability in Google Android 13.0 In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. | 7.8 |
2022-12-14 | CVE-2022-4436 | Use After Free vulnerability in Google Chrome Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 8.8 |