Google: >> Android >> 10.0 Security Vulnerabilities
In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-205837191
CVSS Score
7.5
EPSS Score
0.003
Published
2022-04-12
Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via crafted image file.
CVSS Score
4.0
EPSS Score
0.001
Published
2022-04-11
Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EF_RUIMID value without permission.
CVSS Score
6.6
EPSS Score
0.0
Published
2022-04-11
Improper size check in sapefd_parse_meta_HEADER_old function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file.
CVSS Score
4.0
EPSS Score
0.001
Published
2022-04-11
Improper size check of in sapefd_parse_meta_DESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file
CVSS Score
4.0
EPSS Score
0.001
Published
2022-04-11
Improper size check in sapefd_parse_meta_HEADER function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file.
CVSS Score
4.0
EPSS Score
0.001
Published
2022-04-11
Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVSS Score
8.5
EPSS Score
0.0
Published
2022-04-11
Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVSS Score
8.5
EPSS Score
0.0
Published
2022-04-11
Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVSS Score
8.5
EPSS Score
0.0
Published
2022-04-11
Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVSS Score
8.5
EPSS Score
0.0
Published
2022-04-11