# Android.

Every CVE that names Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Android: In navigateUpToLocked of ActivityStack.java…](https://agentprime.io/advisories/CVE-2020-0098.md)
  `CVE-2020-0098` · CVE record: Android · No CVSS score · Not analysed yet · Published 14 May 2020
- [In onKeyguardVisibilityChanged of key_store_service.cpp, there is a missing permission check.](https://agentprime.io/advisories/CVE-2020-0105.md)
  `CVE-2020-0105` · CVE record: Android · No CVSS score · Not analysed yet · Published 14 May 2020
- [Android: In GattServer::SendResponse of gatt_server.cc…](https://agentprime.io/advisories/CVE-2020-0102.md)
  `CVE-2020-0102` · CVE record: Android · No CVSS score · Not analysed yet · Published 14 May 2020
- [Android: In onCreate of SettingsBaseActivity.java…](https://agentprime.io/advisories/CVE-2020-0024.md)
  `CVE-2020-0024` · CVE record: Android · No CVSS score · Not analysed yet · Published 14 May 2020
- [Android: In authorize_enroll of the FPC IRIS TrustZone app…](https://agentprime.io/advisories/CVE-2020-0077.md)
  `CVE-2020-0077` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [Android: In set_shared_key of the FPC IRIS TrustZone app…](https://agentprime.io/advisories/CVE-2020-0075.md)
  `CVE-2020-0075` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [Android: In get_auth_result of the FPC IRIS TrustZone app…](https://agentprime.io/advisories/CVE-2020-0076.md)
  `CVE-2020-0076` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [There is a possible disclosure of RAM using a shared crypto key due to improperly used crypto.](https://agentprime.io/advisories/CVE-2019-2056.md)
  `CVE-2019-2056` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [Android: In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc…](https://agentprime.io/advisories/CVE-2020-0073.md)
  `CVE-2020-0073` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [Android: In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc…](https://agentprime.io/advisories/CVE-2020-0072.md)
  `CVE-2020-0072` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [Android: In rw_t2t_extract_default_locks_info of rw_t2t_ndef.cc…](https://agentprime.io/advisories/CVE-2020-0071.md)
  `CVE-2020-0071` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [Android: In rw_t2t_update_lock_attributes of rw_t2t_ndef.cc…](https://agentprime.io/advisories/CVE-2020-0070.md)
  `CVE-2020-0070` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer.](https://agentprime.io/advisories/CVE-2020-0079.md)
  `CVE-2020-0079` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [Android: In releaseSecureStops of DrmPlugin.cpp…](https://agentprime.io/advisories/CVE-2020-0078.md)
  `CVE-2020-0078` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [Android: In ExternalVibration of ExternalVibration.java…](https://agentprime.io/advisories/CVE-2020-0082.md)
  `CVE-2020-0082` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [In finalize of AssetManager.java, there is possible memory corruption due to a double free.](https://agentprime.io/advisories/CVE-2020-0081.md)
  `CVE-2020-0081` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [Android: In onOpActiveChanged and related methods of AppOpsControllerImpl.java…](https://agentprime.io/advisories/CVE-2020-0080.md)
  `CVE-2020-0080` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [Android: In crus_afe_get_param of msm-cirrus-playback.c…](https://agentprime.io/advisories/CVE-2020-0068.md)
  `CVE-2020-0068` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [Android: In f2fs_xattr_generic_list of xattr.c…](https://agentprime.io/advisories/CVE-2020-0067.md)
  `CVE-2020-0067` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Apr 2020
- [In Bluetooth, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2019-9474.md)
  `CVE-2019-9474` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Mar 2020
- [In Bluetooth, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2019-9473.md)
  `CVE-2019-9473` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Mar 2020
- [Android: In parseTrackFragmentRun of MPEG4Extractor.cpp…](https://agentprime.io/advisories/CVE-2020-0088.md)
  `CVE-2020-0088` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Mar 2020
- [In readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow.](https://agentprime.io/advisories/CVE-2020-0086.md)
  `CVE-2020-0086` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Mar 2020
- [In libAACdec, there is a possible out of bounds read.](https://agentprime.io/advisories/CVE-2019-2058.md)
  `CVE-2019-2058` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Mar 2020
- [In StatsService, there is a possible out of bounds read.](https://agentprime.io/advisories/CVE-2019-2088.md)
  `CVE-2019-2088` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Mar 2020
- [Android: In app uninstallation, there is a possible set of permissions that may not be removed…](https://agentprime.io/advisories/CVE-2019-2089.md)
  `CVE-2019-2089` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Mar 2020
- [In overlay notifications, there is a possible hidden notification due to improper input validation.](https://agentprime.io/advisories/CVE-2019-2216.md)
  `CVE-2019-2216` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Mar 2020
- [Android: In btm_process_inq_results of btm_inq.cc…](https://agentprime.io/advisories/CVE-2020-0057.md)
  `CVE-2020-0057` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In btu_hcif_connection_comp_evt of btu_hcif.cc…](https://agentprime.io/advisories/CVE-2020-0056.md)
  `CVE-2020-0056` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In l2c_link_process_num_completed_pkts of l2c_link.cc…](https://agentprime.io/advisories/CVE-2020-0055.md)
  `CVE-2020-0055` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java…](https://agentprime.io/advisories/CVE-2020-0054.md)
  `CVE-2020-0054` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In convertHidlNanDataPathInitiatorRequestToLegacy…](https://agentprime.io/advisories/CVE-2020-0053.md)
  `CVE-2020-0053` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In smsSelected of AnswerFragment.java…](https://agentprime.io/advisories/CVE-2020-0052.md)
  `CVE-2020-0052` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In setBluetoothTethering of PanService.java…](https://agentprime.io/advisories/CVE-2020-0085.md)
  `CVE-2020-0085` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [In onCreate of SettingsHomepageActivity, there is a possible tapjacking attack.](https://agentprime.io/advisories/CVE-2020-0051.md)
  `CVE-2020-0051` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In nfa_hciu_send_msg of nfa_hci_utils.cc…](https://agentprime.io/advisories/CVE-2020-0050.md)
  `CVE-2020-0050` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In onReadBuffer() of StreamingSource.cpp…](https://agentprime.io/advisories/CVE-2020-0049.md)
  `CVE-2020-0049` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to…](https://agentprime.io/advisories/CVE-2020-0048.md)
  `CVE-2020-0048` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [In setMasterMute of AudioService.java, there is a missing permission check.](https://agentprime.io/advisories/CVE-2020-0047.md)
  `CVE-2020-0047` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In DrmPlugin::releaseSecureStops of DrmPlugin.cpp…](https://agentprime.io/advisories/CVE-2020-0046.md)
  `CVE-2020-0046` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In getProcessPss of ActivityManagerService.java…](https://agentprime.io/advisories/CVE-2020-0087.md)
  `CVE-2020-0087` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [In several functions of NotificationManagerService.java, there are missing permission checks.](https://agentprime.io/advisories/CVE-2020-0084.md)
  `CVE-2020-0084` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [In Euicc, there is a possible information disclosure due to an included test Certificate.](https://agentprime.io/advisories/CVE-2020-0062.md)
  `CVE-2020-0062` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [In the netlink driver, there is a possible out of bounds write due to a race condition.](https://agentprime.io/advisories/CVE-2020-0066.md)
  `CVE-2020-0066` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE.](https://agentprime.io/advisories/CVE-2020-0063.md)
  `CVE-2020-0063` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In StatsService::command of StatsService.cpp…](https://agentprime.io/advisories/CVE-2020-0045.md)
  `CVE-2020-0045` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio.](https://agentprime.io/advisories/CVE-2020-0061.md)
  `CVE-2020-0061` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In setRequirePmfInternal of sta_network.cpp…](https://agentprime.io/advisories/CVE-2020-0083.md)
  `CVE-2020-0083` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In query of SmsProvider.java and MmsSmsProvider.java…](https://agentprime.io/advisories/CVE-2020-0060.md)
  `CVE-2020-0060` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc…](https://agentprime.io/advisories/CVE-2020-0059.md)
  `CVE-2020-0059` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In l2c_rcv_acl_data of l2c_main.cc, there is a possible out of bounds read due to an…](https://agentprime.io/advisories/CVE-2020-0058.md)
  `CVE-2020-0058` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Out-of-bounds write in Android](https://agentprime.io/advisories/CVE-2020-0069.md)
  `CVE-2020-0069` · CVE record: Android · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 10 Mar 2020 · Tags: Memory corruption
- [Android: In set_nonce of fpc_ta_qc_auth.c, there is a possible out of bounds read due to a missing…](https://agentprime.io/advisories/CVE-2020-0044.md)
  `CVE-2020-0044` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In authorize_enrol of fpc_ta_hw_auth.c…](https://agentprime.io/advisories/CVE-2020-0043.md)
  `CVE-2020-0043` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In fpc_ta_hw_auth_unwrap_key of fpc_ta_hw_auth_qsee.c…](https://agentprime.io/advisories/CVE-2020-0042.md)
  `CVE-2020-0042` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Improper input validation in Android](https://agentprime.io/advisories/CVE-2020-0041.md)
  `CVE-2020-0041` · CVE record: Android · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 10 Mar 2020 · Tags: CWE-20
- [Android: In rw_i93_sm_update_ndef of rw_i93.cc…](https://agentprime.io/advisories/CVE-2020-0039.md)
  `CVE-2020-0039` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In rw_i93_sm_update_ndef of rw_i93.cc…](https://agentprime.io/advisories/CVE-2020-0038.md)
  `CVE-2020-0038` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In rw_i93_sm_set_read_only of rw_i93.cc…](https://agentprime.io/advisories/CVE-2020-0037.md)
  `CVE-2020-0037` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In hasPermissions of PermissionMonitor.java…](https://agentprime.io/advisories/CVE-2020-0036.md)
  `CVE-2020-0036` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020

Newest: <https://agentprime.io/advisories/technology/android.md>
Older: <https://agentprime.io/advisories/technology/android.md?cursor=WyIyMDIwLTAzLTEwVDE5OjU2OjA5LjAwMDAwMFoiLCJDVkUtMjAyMC0wMDM2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=android&cursor=WyIyMDIwLTA1LTE0VDIwOjA4OjM3LjAwMDAwMFoiLCJDVkUtMjAyMC0wMTA0Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/android/?cursor=WyIyMDIwLTA1LTE0VDIwOjA4OjM3LjAwMDAwMFoiLCJDVkUtMjAyMC0wMTA0Il0>. Everything for agents: <https://agentprime.io/llms.txt>.