Vulnerabilities > Google > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-05-03 CVE-2022-20085 Link Following vulnerability in Google Android 11.0/12.0
In netdiag, there is a possible symbolic link following due to an improper link resolution.
local
low complexity
google CWE-59
6.7
2022-05-03 CVE-2022-20087 Out-of-bounds Write vulnerability in Google Android 11.0/12.0
In ccu, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
6.7
2022-05-03 CVE-2022-20089 Unspecified vulnerability in Google Android 11.0/12.0
In aee driver, there is a possible memory corruption due to active debug code.
local
low complexity
google
6.7
2022-05-03 CVE-2022-20090 Use After Free vulnerability in Google Android 11.0/12.0
In aee driver, there is a possible use after free due to a race condition.
local
high complexity
google CWE-416
6.4
2022-05-03 CVE-2022-20091 Use After Free vulnerability in Google Android 11.0/12.0
In aee driver, there is a possible use after free due to a race condition.
local
high complexity
google CWE-416
6.4
2022-05-03 CVE-2022-20092 Out-of-bounds Read vulnerability in Google Android 11.0/12.0
In alac decoder, there is a possible out of bounds read due to a missing bounds check.
local
low complexity
google CWE-125
5.5
2022-05-03 CVE-2022-20094 Out-of-bounds Write vulnerability in Google Android 11.0/12.0
In imgsensor, there is a possible out of bounds write due to an incorrect bounds check.
local
low complexity
google CWE-787
6.7
2022-05-03 CVE-2022-20095 Out-of-bounds Write vulnerability in Google Android 11.0/12.0
In imgsensor, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
6.7
2022-05-03 CVE-2022-20096 Use of Uninitialized Resource vulnerability in Google Android
In camera, there is a possible information disclosure due to uninitialized data.
local
low complexity
google CWE-908
4.4
2022-05-03 CVE-2022-20097 Race Condition vulnerability in Google Android 11.0/12.0
In aee daemon, there is a possible information disclosure due to a race condition.
local
high complexity
google CWE-362
4.7