# Android.

Every CVE that names Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Android: In BTA_DmPinReply of bta_dm_api.cc, there is a possible out of bounds read due to an…](https://agentprime.io/advisories/CVE-2019-2209.md)
  `CVE-2019-2209` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc…](https://agentprime.io/advisories/CVE-2019-2208.md)
  `CVE-2019-2208` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [In poisson_distribution of random, there is an out of bounds read.](https://agentprime.io/advisories/CVE-2019-2212.md)
  `CVE-2019-2212` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc…](https://agentprime.io/advisories/CVE-2019-2207.md)
  `CVE-2019-2207` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In getUserCount and getCount of UserSwitcherController.java…](https://agentprime.io/advisories/CVE-2019-2233.md)
  `CVE-2019-2233` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In rw_i93_sm_set_read_only of rw_i93.cc…](https://agentprime.io/advisories/CVE-2019-2206.md)
  `CVE-2019-2206` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc…](https://agentprime.io/advisories/CVE-2019-2205.md)
  `CVE-2019-2205` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In FindSharedFunctionInfo of objects.cc…](https://agentprime.io/advisories/CVE-2019-2204.md)
  `CVE-2019-2204` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In CryptoPlugin::decrypt of CryptoPlugin.cpp…](https://agentprime.io/advisories/CVE-2019-2203.md)
  `CVE-2019-2203` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In CryptoPlugin::decrypt of CryptoPlugin.cpp…](https://agentprime.io/advisories/CVE-2019-2202.md)
  `CVE-2019-2202` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S…](https://agentprime.io/advisories/CVE-2019-2201.md)
  `CVE-2019-2201` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In processPhonebookAccess of CachedBluetoothDevice.java…](https://agentprime.io/advisories/CVE-2019-2197.md)
  `CVE-2019-2197` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection.](https://agentprime.io/advisories/CVE-2019-2211.md)
  `CVE-2019-2211` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass.](https://agentprime.io/advisories/CVE-2019-2199.md)
  `CVE-2019-2199` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In tokenize of sqlite3_android.cpp, there is a possible attacker controlled INSERT…](https://agentprime.io/advisories/CVE-2019-2195.md)
  `CVE-2019-2195` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In WelcomeActivity.java and related files…](https://agentprime.io/advisories/CVE-2019-2193.md)
  `CVE-2019-2193` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In call of SliceProvider.java, there is a possible permissions bypass due to improper…](https://agentprime.io/advisories/CVE-2019-2192.md)
  `CVE-2019-2192` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In generateServicesMap of RegisteredServicesCache.java…](https://agentprime.io/advisories/CVE-2019-2183.md)
  `CVE-2019-2183` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2019
- [Use after free in Android](https://agentprime.io/advisories/CVE-2019-2215.md)
  `CVE-2019-2215` · CVE record: Android · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.72 · Not analysed yet · Published 11 Oct 2019 · Tags: Memory corruption
- [Android: In nfc_ncif_decode_rf_params of nfc_ncif.cc…](https://agentprime.io/advisories/CVE-2019-2187.md)
  `CVE-2019-2187` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2019
- [Android: In the default privileges of NFC, there is a possible local bypass of user interaction…](https://agentprime.io/advisories/CVE-2019-2114.md)
  `CVE-2019-2114` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2019
- [Android: In ScreenRotationAnimation of ScreenRotationAnimation.java…](https://agentprime.io/advisories/CVE-2019-2110.md)
  `CVE-2019-2110` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2019
- [Android: In GetMBheader of combined_decode.cpp…](https://agentprime.io/advisories/CVE-2019-2186.md)
  `CVE-2019-2186` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2019
- [Android: In VlcDequantH263IntraBlock_SH of vlc_dequant.cpp…](https://agentprime.io/advisories/CVE-2019-2185.md)
  `CVE-2019-2185` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2019
- [Android: In PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp…](https://agentprime.io/advisories/CVE-2019-2184.md)
  `CVE-2019-2184` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2019
- [Android: In startActivityMayWait of ActivityStarter.java…](https://agentprime.io/advisories/CVE-2019-2173.md)
  `CVE-2019-2173` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2019
- [Android: In LG's LAF component, there is a possible leak of information in a protected disk…](https://agentprime.io/advisories/CVE-2019-2191.md)
  `CVE-2019-2191` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [Android: In LG's LAF component, there is a possible leak of information in a protected disk…](https://agentprime.io/advisories/CVE-2019-2190.md)
  `CVE-2019-2190` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In the Easel driver, there is possible memory corruption due to race conditions.](https://agentprime.io/advisories/CVE-2019-2189.md)
  `CVE-2019-2189` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In the Easel driver, there is possible memory corruption due to race conditions.](https://agentprime.io/advisories/CVE-2019-2188.md)
  `CVE-2019-2188` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [Android: In Platform, there is a possible bypass of user interaction requirements due to…](https://agentprime.io/advisories/CVE-2019-9463.md)
  `CVE-2019-9463` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check.](https://agentprime.io/advisories/CVE-2019-9462.md)
  `CVE-2019-9462` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In libttspico, there is a possible OOB write due to a heap buffer overflow.](https://agentprime.io/advisories/CVE-2019-9459.md)
  `CVE-2019-9459` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In AOSP Email, there is a possible information disclosure due to a confused deputy.](https://agentprime.io/advisories/CVE-2019-9440.md)
  `CVE-2019-9440` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In the Package Manager service, there is a possible information disclosure due to a confused deputy.](https://agentprime.io/advisories/CVE-2019-9438.md)
  `CVE-2019-9438` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [Android: In WiFi, the RSSI value and SSID information is broadcast as part of…](https://agentprime.io/advisories/CVE-2018-9581.md)
  `CVE-2018-9581` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [Android: In Platform, there is a possible bypass of user interaction requirements due to missing…](https://agentprime.io/advisories/CVE-2018-9425.md)
  `CVE-2018-9425` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In Bluetooth, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2019-9435.md)
  `CVE-2019-9435` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In Bluetooth, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2019-9434.md)
  `CVE-2019-9434` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In libvpx, there is a possible information disclosure due to improper input validation.](https://agentprime.io/advisories/CVE-2019-9433.md)
  `CVE-2019-9433` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In Bluetooth, there is a possible out of bounds read due to improper input validation.](https://agentprime.io/advisories/CVE-2019-9432.md)
  `CVE-2019-9432` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In Bluetooth, there is a possible out of bounds read due to a use after free.](https://agentprime.io/advisories/CVE-2019-9431.md)
  `CVE-2019-9431` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In Bluetooth, there is a possible null pointer dereference due to a missing null check.](https://agentprime.io/advisories/CVE-2019-9430.md)
  `CVE-2019-9430` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In profman, there is a possible out of bounds write due to memory corruption.](https://agentprime.io/advisories/CVE-2019-9429.md)
  `CVE-2019-9429` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs.](https://agentprime.io/advisories/CVE-2019-9428.md)
  `CVE-2019-9428` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In Bluetooth, there is a possible information disclosure due to a use after free.](https://agentprime.io/advisories/CVE-2019-9427.md)
  `CVE-2019-9427` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In Bluetooth, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2019-9425.md)
  `CVE-2019-9425` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In the Screen Lock, there is a possible information disclosure due to an unusual root cause.](https://agentprime.io/advisories/CVE-2019-9424.md)
  `CVE-2019-9424` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In Bluetooth, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2019-9422.md)
  `CVE-2019-9422` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In libandroidfw, there is a possible OOB read due to an integer overflow.](https://agentprime.io/advisories/CVE-2019-9421.md)
  `CVE-2019-9421` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In libhevc, there is a possible out of bounds read due to an integer overflow.](https://agentprime.io/advisories/CVE-2019-9420.md)
  `CVE-2019-9420` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In Bluetooth, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2019-9419.md)
  `CVE-2019-9419` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In libstagefright, there is a possible resource exhaustion due to a missing bounds check.](https://agentprime.io/advisories/CVE-2019-9418.md)
  `CVE-2019-9418` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In Bluetooth, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2019-9417.md)
  `CVE-2019-9417` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In libstagefright there is a possible information disclosure due to uninitialized data.](https://agentprime.io/advisories/CVE-2019-9416.md)
  `CVE-2019-9416` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In libstagefright there is a possible information disclosure due to uninitialized data.](https://agentprime.io/advisories/CVE-2019-9415.md)
  `CVE-2019-9415` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [Android: In wpa_supplicant, there is a possible man in the middle vulnerability due to improper…](https://agentprime.io/advisories/CVE-2019-9414.md)
  `CVE-2019-9414` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In Bluetooth, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2019-9413.md)
  `CVE-2019-9413` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In libSBRdec there is a possible out of bounds read due to incorrect bounds check.](https://agentprime.io/advisories/CVE-2019-9412.md)
  `CVE-2019-9412` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019
- [In libavc there is a possible information disclosure due to uninitialized data.](https://agentprime.io/advisories/CVE-2019-9411.md)
  `CVE-2019-9411` · CVE record: Android · No CVSS score · Not analysed yet · Published 27 Sept 2019

Newest: <https://agentprime.io/advisories/technology/android.md>
Older: <https://agentprime.io/advisories/technology/android.md?cursor=WyIyMDE5LTA5LTI3VDE4OjA1OjE4LjAwMDAwMFoiLCJDVkUtMjAxOS05NDExIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=android&cursor=WyIyMDE5LTExLTEzVDE3OjQzOjM0LjAwMDAwMFoiLCJDVkUtMjAxOS0yMTk2Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/android/?cursor=WyIyMDE5LTExLTEzVDE3OjQzOjM0LjAwMDAwMFoiLCJDVkUtMjAxOS0yMTk2Il0>. Everything for agents: <https://agentprime.io/llms.txt>.