Google CVEs
9,109 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-48412In private_handle_t of mali_gralloc_buffer.h, there is a possible information leak due to a logic error in the code.
- CVE-2023-48411In SignalStrengthAdapter::FillGsmSignalStrength() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds
- CVE-2023-48410In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check.
- CVE-2023-48409In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there is a possible out o
- CVE-2023-48408In ProtocolNetSimFileInfoAdapter() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check.
- CVE-2023-48407there is a possible DCK won't be deleted after factory reset due to a logic error in the code.
- CVE-2023-48406there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code.
- CVE-2023-48405there is a possible way for the secure world to write to NS memory due to a logic error in the code.
- CVE-2023-48404In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds che
- CVE-2023-48403In sms_DecodeCodedTpMsg of sms_PduCodec.c, there is a possible out of bounds read due to a heap buffer overflow.
- CVE-2023-48402In ppcfw_enable of ppcfw.c, there is a possible EoP due to a missing permission check.
- CVE-2023-48401In GetSizeOfEenlRecords of protocoladapter.cpp, there is a possible out of bounds read due to an incorrect bounds check.
- CVE-2023-48399In ProtocolMiscATCommandAdapter::Init() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check.
- CVE-2023-48398In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing b
- CVE-2023-48397In Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check.
- CVE-2023-6512Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially spoof the co
- CVE-2023-6511Inappropriate implementation in Autofill in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to bypass Autofill restrictions v
- CVE-2023-6510Use after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific
- CVE-2023-6509Use after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in spec
- CVE-2023-6508Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially exploit heap corruption via
- CVE-2023-45781In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check.
- CVE-2023-45779In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto.
- CVE-2023-45777In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privil
- CVE-2023-45776In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check.
- CVE-2023-45775In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check.
- CVE-2023-45774In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user's image due to a confused deputy.
- CVE-2023-45773In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check.
- CVE-2023-40103In multiple locations, there is a possible way to corrupt memory due to a double free.
- CVE-2023-40098In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic erro
- CVE-2023-40097In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation.