Google CVEs
9,109 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-40096In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing f
- CVE-2023-40095In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check.
- CVE-2023-40094In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check.
- CVE-2023-40092In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confused deputy.
- CVE-2023-40091In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption.
- CVE-2023-40090In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure.
- CVE-2023-40089In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without
- CVE-2023-40088In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after fre
- CVE-2023-40087In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check.
- CVE-2023-40084In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free.
- CVE-2023-40083In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check.
- CVE-2023-40082In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto.
- CVE-2023-40081In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to a confused deputy.
- CVE-2023-40080In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code.
- CVE-2023-40079In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass.
- CVE-2023-40078In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overf
- CVE-2023-40077In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition.
- CVE-2023-40076In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due to a permissions bypa
- CVE-2023-40075In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check.
- CVE-2023-40074In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privilege
- CVE-2023-40073In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy.
- CVE-2023-35690 In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception.
- CVE-2023-35668In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy.
- CVE-2023-21403In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception.
- CVE-2023-21402In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation.
- CVE-2023-21401In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow.
- CVE-2023-21263 In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception.
- CVE-2023-21228In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2023-21227In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure.
- CVE-2023-21218In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check.