Google Android vulnerabilities

CVE-2019-9239 [MEDIUM] CWE-125 CVE-2019-9239: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121263487

CVE-2019-2039 [MEDIUM] CWE-125 CVE-2019-2039: In rw_i93_sm_detect_ndef of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds In rw_i93_sm_detect_ndef of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. A

CVE-2019-9240 [MEDIUM] CWE-125 CVE-2019-9240: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121150966

CVE-2019-9236 [MEDIUM] CWE-125 CVE-2019-9236: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122322613

CVE-2019-9296 [MEDIUM] CWE-125 CVE-2019-9296: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112162089

CVE-2019-9235 [MEDIUM] CWE-125 CVE-2019-9235: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122323053

CVE-2019-9242 [MEDIUM] CWE-125 CVE-2019-9242: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121035878

CVE-2019-9246 [MEDIUM] CWE-125 CVE-2019-9246: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120428637

CVE-2019-9244 [MEDIUM] CWE-125 CVE-2019-9244: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120865977

CVE-2019-9356 [MEDIUM] CWE-125 CVE-2019-9356: In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111699773

CVE-2019-9251 [MEDIUM] CWE-125 CVE-2019-9251: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120274615

CVE-2019-9344 [MEDIUM] CWE-125 CVE-2019-9344: In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120845341

CVE-2019-9383 [MEDIUM] CWE-125 CVE-2019-9383: In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120843827

CVE-2019-9421 [MEDIUM] CWE-125 CVE-2019-9421: In libandroidfw, there is a possible OOB read due to an integer overflow. This could lead to local i In libandroidfw, there is a possible OOB read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111215250

CVE-2021-0952 [MEDIUM] CVE-2021-0952: In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confuse In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure of user's contacts with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-195748381

CVE-2021-0569 [MEDIUM] CWE-1021 CVE-2021-0569: In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/ov In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174045870

CVE-2022-20394 [MEDIUM] CWE-862 CVE-2022-20394: In getInputMethodWindowVisibleHeight of InputMethodManagerService.java, there is a possible way to d In getInputMethodWindowVisibleHeight of InputMethodManagerService.java, there is a possible way to determine when another app is showing an IME due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Androi

CVE-2015-6783 [MEDIUM] CWE-20 CVE-2015-6783: The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy Linke The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy Linker) in Android 5.x and 6.x, as used in Google Chrome before 47.0.2526.73, improperly searches for an EOCD record, which allows attackers to bypass a signature-validation requirement via a crafted ZIP archive.

CVE-2019-2219 [MEDIUM] CWE-362 CVE-2019-2219: In several functions of NotificationManagerService.java and related files, there is a possible way t In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersi

CVE-2021-0320 [MEDIUM] CWE-362 CVE-2021-0320: In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a possible b In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a possible bypass of lockscreen requirements for keyguard bound keys due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions