# Android.

Every CVE that names Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [In libsonivox, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2020-0324.md)
  `CVE-2020-0324` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In AudioService, there are missing permission checks.](https://agentprime.io/advisories/CVE-2020-0314.md)
  `CVE-2020-0314` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In the AAC parser, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2020-0279.md)
  `CVE-2020-0279` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In the OMX parser, there is a possible information disclosure due to a returned raw pointer.](https://agentprime.io/advisories/CVE-2020-0274.md)
  `CVE-2020-0274` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In tremolo, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2020-0270.md)
  `CVE-2020-0270` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In mediadrm, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2020-0125.md)
  `CVE-2020-0125` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2020-0406.md)
  `CVE-2020-0406` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: In Notification Access Confirmation, there is a possible permissions bypass due to…](https://agentprime.io/advisories/CVE-2020-0360.md)
  `CVE-2020-0360` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In SurfaceFlinger, there is a possible use after free due to a race condition.](https://agentprime.io/advisories/CVE-2020-0358.md)
  `CVE-2020-0358` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In SurfaceFlinger, there is a possible use-after-free due to improper locking.](https://agentprime.io/advisories/CVE-2020-0357.md)
  `CVE-2020-0357` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check.](https://agentprime.io/advisories/CVE-2020-0356.md)
  `CVE-2020-0356` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In Mediaserver, there is a possible out of bounds write due to an integer overflow.](https://agentprime.io/advisories/CVE-2020-0346.md)
  `CVE-2020-0346` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In SurfaceFlinger, there is possible memory corruption due to type confusion.](https://agentprime.io/advisories/CVE-2020-0336.md)
  `CVE-2020-0336` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: In LLVM, there is a possible ineffective stack cookie placement due to stack frame double…](https://agentprime.io/advisories/CVE-2020-0306.md)
  `CVE-2020-0306` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In the mp3 extractor, there is a possible out of bounds write due to uninitialized data.](https://agentprime.io/advisories/CVE-2020-0321.md)
  `CVE-2020-0321` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In the Media extractor, there is a possible use after free due to improper locking.](https://agentprime.io/advisories/CVE-2020-0303.md)
  `CVE-2020-0303` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In libstagefright, there is a possible out of bounds write due to an integer overflow.](https://agentprime.io/advisories/CVE-2020-0264.md)
  `CVE-2020-0264` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent.](https://agentprime.io/advisories/CVE-2020-0426.md)
  `CVE-2020-0426` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [There is a possible way to view notifications even when the "Lockdown" feature is on.](https://agentprime.io/advisories/CVE-2020-0425.md)
  `CVE-2020-0425` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In libavb, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2020-0323.md)
  `CVE-2020-0323` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In apexd, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2020-0322.md)
  `CVE-2020-0322` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In libavb, there is a possible out of bounds write due to an integer overflow.](https://agentprime.io/advisories/CVE-2020-0369.md)
  `CVE-2020-0369` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In ActivityManager, there is a possible access to protected data due to a missing permission check.](https://agentprime.io/advisories/CVE-2020-0372.md)
  `CVE-2020-0372` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In MediaProvider, there is a possible permissions bypass due to SQL injection.](https://agentprime.io/advisories/CVE-2020-0352.md)
  `CVE-2020-0352` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: In NetworkStatsService, there is a possible access to protected data due to a missing…](https://agentprime.io/advisories/CVE-2020-0343.md)
  `CVE-2020-0343` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: In UsageStatsManager, there is a possible access to protected data due to a missing…](https://agentprime.io/advisories/CVE-2020-0317.md)
  `CVE-2020-0317` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent.](https://agentprime.io/advisories/CVE-2020-0312.md)
  `CVE-2020-0312` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent.](https://agentprime.io/advisories/CVE-2020-0308.md)
  `CVE-2020-0308` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In devicepolicy service, there is a possible permission bypass due to an unsafe PendingIntent.](https://agentprime.io/advisories/CVE-2020-0297.md)
  `CVE-2020-0297` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In ADB server and USB server, there is a possible permission bypass due to an unsafe PendingIntent.](https://agentprime.io/advisories/CVE-2020-0296.md)
  `CVE-2020-0296` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: In Java network APIs, there is possible access to sensitive network state due to a…](https://agentprime.io/advisories/CVE-2020-0293.md)
  `CVE-2020-0293` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In PackageManager, there is a missing permission check.](https://agentprime.io/advisories/CVE-2020-0290.md)
  `CVE-2020-0290` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In PackageManager, there is a missing permission check.](https://agentprime.io/advisories/CVE-2020-0289.md)
  `CVE-2020-0289` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In PackageManager, there is a missing permission check.](https://agentprime.io/advisories/CVE-2020-0288.md)
  `CVE-2020-0288` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability.](https://agentprime.io/advisories/CVE-2020-0366.md)
  `CVE-2020-0366` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In DocumentsUI, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2020-0345.md)
  `CVE-2020-0345` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In DisplayManager, there is a possible permission bypass due to a missing permission check.](https://agentprime.io/advisories/CVE-2020-0341.md)
  `CVE-2020-0341` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: In NetworkPolicyManagerService, there is a possible permissions bypass due to a missing…](https://agentprime.io/advisories/CVE-2020-0277.md)
  `CVE-2020-0277` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In screencap, there is a possible command injection due to improper input validation.](https://agentprime.io/advisories/CVE-2020-0130.md)
  `CVE-2020-0130` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In UrlQuerySanitizer, there is a possible improper input validation.](https://agentprime.io/advisories/CVE-2020-0333.md)
  `CVE-2020-0333` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass.](https://agentprime.io/advisories/CVE-2020-0338.md)
  `CVE-2020-0338` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy.](https://agentprime.io/advisories/CVE-2020-0337.md)
  `CVE-2020-0337` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: In MediaProvider, there is a possible way to access ContentResolver and MediaStore…](https://agentprime.io/advisories/CVE-2020-0275.md)
  `CVE-2020-0275` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In WindowManager, there is a possible launch of an unexpected app due to a confused deputy.](https://agentprime.io/advisories/CVE-2020-0267.md)
  `CVE-2020-0267` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In iorap, there is a possible memory corruption due to a use after free.](https://agentprime.io/advisories/CVE-2020-0330.md)
  `CVE-2020-0330` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free.](https://agentprime.io/advisories/CVE-2020-0434.md)
  `CVE-2020-0434` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: In blk_mq_queue_tag_busy_iter of blk-mq-tag.c…](https://agentprime.io/advisories/CVE-2020-0433.md)
  `CVE-2020-0433` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow.](https://agentprime.io/advisories/CVE-2020-0432.md)
  `CVE-2020-0432` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2020-0431.md)
  `CVE-2020-0431` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: In skb_headlen of /include/linux/skbuff.h…](https://agentprime.io/advisories/CVE-2020-0430.md)
  `CVE-2020-0430` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: In l2tp_session_delete and related functions of l2tp_core.c…](https://agentprime.io/advisories/CVE-2020-0429.md)
  `CVE-2020-0429` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In CamX code, there is a possible use after free due to a race condition.](https://agentprime.io/advisories/CVE-2020-0428.md)
  `CVE-2020-0428` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: In the FPC TrustZone fingerprint App…](https://agentprime.io/advisories/CVE-2020-0403.md)
  `CVE-2020-0403` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: In manifest files of the SmartSpace package…](https://agentprime.io/advisories/CVE-2020-0387.md)
  `CVE-2020-0387` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: There is a possible out of bounds write due to an incorrect bounds check.Product…](https://agentprime.io/advisories/CVE-2020-0342.md)
  `CVE-2020-0342` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: There is a possible out of bounds write due to an incorrect bounds check.Product…](https://agentprime.io/advisories/CVE-2020-0278.md)
  `CVE-2020-0278` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: In applyPolicy of PackageManagerService.java…](https://agentprime.io/advisories/CVE-2020-0391.md)
  `CVE-2020-0391` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [In the app zygote SE Policy, there is a possible permissions bypass.](https://agentprime.io/advisories/CVE-2020-0390.md)
  `CVE-2020-0390` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: In createSaveNotification of RecordingService.java…](https://agentprime.io/advisories/CVE-2020-0389.md)
  `CVE-2020-0389` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020
- [Android: There is a possible out of bounds write due to an incorrect bounds check.Product…](https://agentprime.io/advisories/CVE-2020-0229.md)
  `CVE-2020-0229` · CVE record: Android · No CVSS score · Not analysed yet · Published 17 Sept 2020

Newest: <https://agentprime.io/advisories/technology/android.md>
Older: <https://agentprime.io/advisories/technology/android.md?cursor=WyIyMDIwLTA5LTE3VDE1OjUwOjA4LjAwMDAwMFoiLCJDVkUtMjAyMC0wMjI5Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=android&cursor=WyIyMDIwLTA5LTE3VDIwOjU1OjEwLjAwMDAwMFoiLCJDVkUtMjAyMC0wMzI4Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/android/?cursor=WyIyMDIwLTA5LTE3VDIwOjU1OjEwLjAwMDAwMFoiLCJDVkUtMjAyMC0wMzI4Il0>. Everything for agents: <https://agentprime.io/llms.txt>.