Vulnerabilities > Google > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-12-15 CVE-2020-0477 Missing Authorization vulnerability in Google Android 11.0
In sendLinkConfigurationChangedBroadcast of ClientModeImpl.java, there is a possible information disclosure due to a missing permission check.
local
low complexity
google CWE-862
5.5
2020-12-15 CVE-2020-0476 Information Exposure Through Log Files vulnerability in Google Android 11.0
In onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to logs.
local
low complexity
google CWE-532
4.4
2020-12-15 CVE-2020-0473 Incorrect Authorization vulnerability in Google Android 11.0
In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass.
low complexity
google CWE-863
4.6
2020-12-15 CVE-2020-0280 Out-of-bounds Read vulnerability in Google Android 11.0
In nci_proc_ee_management_rsp of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check.
local
low complexity
google CWE-125
5.5
2020-12-15 CVE-2020-0244 Out-of-bounds Read vulnerability in Google Android 11.0
In writeBurstBufferBytes of SPDIFEncoder.cpp, there is a possible out of bounds read due to an incorrect bounds check.
local
low complexity
google CWE-125
5.5
2020-12-15 CVE-2020-8944 Out-of-bounds Write vulnerability in Google Asylo
An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecall_restore using the attribute output which fails to check the range of a pointer.
local
low complexity
google CWE-787
5.5
2020-12-15 CVE-2020-8943 Out-of-bounds Read vulnerability in Google Asylo
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvfrom whose return size was not validated against the requested size.
local
low complexity
google CWE-125
5.5
2020-12-15 CVE-2020-8942 Out-of-bounds Read vulnerability in Google Asylo
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_read whose return size was not validated against the requrested size.
local
low complexity
google CWE-125
5.5
2020-12-15 CVE-2020-8941 Out-of-bounds Read vulnerability in Google Asylo
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_inet_pton using an attacker controlled klinux_addr_buffer parameter.
local
low complexity
google CWE-125
5.5
2020-12-15 CVE-2020-8940 Out-of-bounds Read vulnerability in Google Asylo
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvmsg using an attacker controlled result parameter.
local
low complexity
google CWE-125
5.5