# Android.

Every CVE that names Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [SQL injection in Android](https://agentprime.io/advisories/CVE-2026-28576.md)
  `CVE-2026-28576` · CVE record: Android Android · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jun 2026 · Tags: SQL injection
- [Information disclosure in Android](https://agentprime.io/advisories/CVE-2023-21237.md)
  `CVE-2023-21237` · CVE record: Android · CVSS 6.2 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 28 Jun 2023 · Tags: Information disclosure
- [Android: In aoc_service_set_read_blocked of aoc.c…](https://agentprime.io/advisories/CVE-2023-21236.md)
  `CVE-2023-21236` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c…](https://agentprime.io/advisories/CVE-2023-21226.md)
  `CVE-2023-21226` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: there is a possible way to bypass the protected confirmation screen due to Failure to…](https://agentprime.io/advisories/CVE-2023-21225.md)
  `CVE-2023-21225` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In ss_ProcessReturnResultComponent of ss_MmConManagement.c…](https://agentprime.io/advisories/CVE-2023-21224.md)
  `CVE-2023-21224` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c…](https://agentprime.io/advisories/CVE-2023-21223.md)
  `CVE-2023-21223` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-21222.md)
  `CVE-2023-21222` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: there is a possible use of unencrypted transport over cellular networks due to an…](https://agentprime.io/advisories/CVE-2023-21220.md)
  `CVE-2023-21220` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: there is a possible use of unencrypted transport over cellular networks due to an…](https://agentprime.io/advisories/CVE-2023-21219.md)
  `CVE-2023-21219` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In addGroupWithConfigInternal of p2p_iface.cpp…](https://agentprime.io/advisories/CVE-2023-21214.md)
  `CVE-2023-21214` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In initiateTdlsTeardownInternal of sta_iface.cpp…](https://agentprime.io/advisories/CVE-2023-21213.md)
  `CVE-2023-21213` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [In multiple files, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-21212.md)
  `CVE-2023-21212` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [In multiple files, there is a possible out of bounds read due to a heap buffer overflow.](https://agentprime.io/advisories/CVE-2023-21211.md)
  `CVE-2023-21211` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In initiateHs20IconQueryInternal of sta_iface.cpp…](https://agentprime.io/advisories/CVE-2023-21210.md)
  `CVE-2023-21210` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In multiple functions of sta_iface.cpp…](https://agentprime.io/advisories/CVE-2023-21209.md)
  `CVE-2023-21209` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2023-21208.md)
  `CVE-2023-21208` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023 · Tags: Memory corruption
- [Android: In initiateTdlsSetupInternal of sta_iface.cpp…](https://agentprime.io/advisories/CVE-2023-21207.md)
  `CVE-2023-21207` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2023-21206.md)
  `CVE-2023-21206` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023 · Tags: Memory corruption
- [Android: In startWpsPinDisplayInternal of sta_iface.cpp…](https://agentprime.io/advisories/CVE-2023-21205.md)
  `CVE-2023-21205` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [In multiple files, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-21204.md)
  `CVE-2023-21204` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In startWpsPbcInternal of sta_iface.cpp…](https://agentprime.io/advisories/CVE-2023-21203.md)
  `CVE-2023-21203` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In btm_delete_stored_link_key_complete of btm_devctl.cc…](https://agentprime.io/advisories/CVE-2023-21202.md)
  `CVE-2023-21202` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In on_create_record_event of btif_sdp_server.cc…](https://agentprime.io/advisories/CVE-2023-21201.md)
  `CVE-2023-21201` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2023-21200.md)
  `CVE-2023-21200` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023 · Tags: Memory corruption
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2023-21199.md)
  `CVE-2023-21199` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023 · Tags: Memory corruption
- [Android: In remove_sdp_record of btif_sdp_server.cc…](https://agentprime.io/advisories/CVE-2023-21198.md)
  `CVE-2023-21198` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In btm_acl_process_sca_cmpl_pkt of btm_acl.cc…](https://agentprime.io/advisories/CVE-2023-21197.md)
  `CVE-2023-21197` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc…](https://agentprime.io/advisories/CVE-2023-21196.md)
  `CVE-2023-21196` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc…](https://agentprime.io/advisories/CVE-2023-21195.md)
  `CVE-2023-21195` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In gatt_dbg_op_name of gatt_utils.cc…](https://agentprime.io/advisories/CVE-2023-21194.md)
  `CVE-2023-21194` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow.](https://agentprime.io/advisories/CVE-2023-21193.md)
  `CVE-2023-21193` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java…](https://agentprime.io/advisories/CVE-2023-21192.md)
  `CVE-2023-21192` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In fixNotification of NotificationManagerService.java…](https://agentprime.io/advisories/CVE-2023-21191.md)
  `CVE-2023-21191` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In btm_acl_encrypt_change of btm_acl.cc…](https://agentprime.io/advisories/CVE-2023-21190.md)
  `CVE-2023-21190` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In startLockTaskMode of LockTaskController.java…](https://agentprime.io/advisories/CVE-2023-21189.md)
  `CVE-2023-21189` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In btm_ble_update_inq_result of btm_ble_gap.cc…](https://agentprime.io/advisories/CVE-2023-21188.md)
  `CVE-2023-21188` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Incorrect default permissions in Android](https://agentprime.io/advisories/CVE-2023-21187.md)
  `CVE-2023-21187` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023 · Tags: Broken access control
- [In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-21186.md)
  `CVE-2023-21186` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [In multiple functions of WifiNetworkFactory.java, there is a missing permission check.](https://agentprime.io/advisories/CVE-2023-21185.md)
  `CVE-2023-21185` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java…](https://agentprime.io/advisories/CVE-2023-21184.md)
  `CVE-2023-21184` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In ForegroundUtils of ForegroundUtils.java…](https://agentprime.io/advisories/CVE-2023-21183.md)
  `CVE-2023-21183` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp…](https://agentprime.io/advisories/CVE-2023-21182.md)
  `CVE-2023-21182` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In btm_ble_update_inq_result of btm_ble_gap.cc…](https://agentprime.io/advisories/CVE-2023-21181.md)
  `CVE-2023-21181` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap…](https://agentprime.io/advisories/CVE-2023-21180.md)
  `CVE-2023-21180` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In parseSecurityParamsFromXml of XmlUtil.java…](https://agentprime.io/advisories/CVE-2023-21179.md)
  `CVE-2023-21179` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a…](https://agentprime.io/advisories/CVE-2023-21178.md)
  `CVE-2023-21178` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In requestAppKeyboardShortcuts of WindowManagerService.java…](https://agentprime.io/advisories/CVE-2023-21177.md)
  `CVE-2023-21177` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Resource allocation without limits in Android](https://agentprime.io/advisories/CVE-2023-21176.md)
  `CVE-2023-21176` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023 · Tags: Denial of service
- [Incorrect default permissions in Android](https://agentprime.io/advisories/CVE-2023-21175.md)
  `CVE-2023-21175` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023 · Tags: Broken access control
- [Android: In isPageSearchEnabled of BillingCycleSettings.java…](https://agentprime.io/advisories/CVE-2023-21174.md)
  `CVE-2023-21174` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In multiple methods of DataUsageList.java…](https://agentprime.io/advisories/CVE-2023-21173.md)
  `CVE-2023-21173` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In multiple functions of WifiCallingSettings.java…](https://agentprime.io/advisories/CVE-2023-21172.md)
  `CVE-2023-21172` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In verifyInputEvent of InputDispatcher.cpp…](https://agentprime.io/advisories/CVE-2023-21171.md)
  `CVE-2023-21171` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In executeSetClientTarget of ComposerCommandEngine.h…](https://agentprime.io/advisories/CVE-2023-21170.md)
  `CVE-2023-21170` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a…](https://agentprime.io/advisories/CVE-2023-21169.md)
  `CVE-2023-21169` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In convertCbYCrY of ColorConverter.cpp…](https://agentprime.io/advisories/CVE-2023-21168.md)
  `CVE-2023-21168` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In setProfileName of DevicePolicyManagerService.java…](https://agentprime.io/advisories/CVE-2023-21167.md)
  `CVE-2023-21167` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-21161.md)
  `CVE-2023-21161` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In BuildSetTcsFci of protocolmiscbuilder.cpp…](https://agentprime.io/advisories/CVE-2023-21160.md)
  `CVE-2023-21160` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023

Older: <https://agentprime.io/advisories/technology/android.md?cursor=WyIyMDIzLTA2LTI4VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy0yMTE2MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=android>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/android/>. Everything for agents: <https://agentprime.io/llms.txt>.