# Android.

Every CVE that names Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Android: In query of TelephonyProvider.java, there is a possible access to SIM card info due to a…](https://agentprime.io/advisories/CVE-2020-0035.md)
  `CVE-2020-0035` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In vp8_decode_frame of decodeframe.c…](https://agentprime.io/advisories/CVE-2020-0034.md)
  `CVE-2020-0034` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In CryptoPlugin::decrypt of CryptoPlugin.cpp…](https://agentprime.io/advisories/CVE-2020-0033.md)
  `CVE-2020-0033` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In ih264d_release_display_bufs of ih264d_utils.c…](https://agentprime.io/advisories/CVE-2020-0032.md)
  `CVE-2020-0032` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In triggerAugmentedAutofillLocked and related functions of Session.java…](https://agentprime.io/advisories/CVE-2020-0031.md)
  `CVE-2020-0031` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In the WifiConfigManager, there is a possible storage of location history which can only…](https://agentprime.io/advisories/CVE-2020-0029.md)
  `CVE-2020-0029` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c…](https://agentprime.io/advisories/CVE-2020-0012.md)
  `CVE-2020-0012` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In get_auth_result of fpc_ta_hw_auth.c…](https://agentprime.io/advisories/CVE-2020-0011.md)
  `CVE-2020-0011` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [Android: In fpc_ta_get_build_info of fpc_ta_kpi.c…](https://agentprime.io/advisories/CVE-2020-0010.md)
  `CVE-2020-0010` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 Mar 2020
- [In binder_thread_release of binder.c, there is a possible use after free due to a race condition.](https://agentprime.io/advisories/CVE-2020-0030.md)
  `CVE-2020-0030` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Feb 2020
- [Android: In notifyNetworkTested and related functions of NetworkMonitor.java…](https://agentprime.io/advisories/CVE-2020-0028.md)
  `CVE-2020-0028` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Feb 2020
- [Android: In HidRawSensor::batch of HidRawSensor.cpp…](https://agentprime.io/advisories/CVE-2020-0027.md)
  `CVE-2020-0027` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Feb 2020
- [In Parcel::continueWrite of Parcel.cpp, there is possible memory corruption due to a use after free.](https://agentprime.io/advisories/CVE-2020-0026.md)
  `CVE-2020-0026` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Feb 2020
- [Android: In btm_read_remote_ext_features_complete of btm_acl.cc…](https://agentprime.io/advisories/CVE-2020-0005.md)
  `CVE-2020-0005` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Feb 2020
- [Android: In setPhonebookAccessPermission of AdapterService.java…](https://agentprime.io/advisories/CVE-2020-0023.md)
  `CVE-2020-0023` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Feb 2020
- [Incorrect calculation in Android](https://agentprime.io/advisories/CVE-2020-0022.md)
  `CVE-2020-0022` · CVE record: Android · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2020 · Tags: CWE-682
- [Android: In removeUnusedPackagesLPw of PackageManagerService.java…](https://agentprime.io/advisories/CVE-2020-0021.md)
  `CVE-2020-0021` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Feb 2020
- [Android: In getAttributeRange of ExifInterface.java…](https://agentprime.io/advisories/CVE-2020-0020.md)
  `CVE-2020-0020` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Feb 2020
- [Android: In MotionEntry::appendDescription of InputDispatcher.cpp…](https://agentprime.io/advisories/CVE-2020-0018.md)
  `CVE-2020-0018` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Feb 2020
- [Android: In multiple places, it was possible for the primary user’s dictionary to be visible to…](https://agentprime.io/advisories/CVE-2020-0017.md)
  `CVE-2020-0017` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Feb 2020
- [Android: In updatePermissions of PermissionManagerService.java…](https://agentprime.io/advisories/CVE-2019-2200.md)
  `CVE-2019-2200` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Feb 2020
- [Android: In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate…](https://agentprime.io/advisories/CVE-2020-0015.md)
  `CVE-2020-0015` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Feb 2020
- [Android: It is possible for a malicious application to construct a TYPE_TOAST window manually and…](https://agentprime.io/advisories/CVE-2020-0014.md)
  `CVE-2020-0014` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Feb 2020
- [Android: In LowEnergyClient::MtuChangedCallback of low_energy_client.cc…](https://agentprime.io/advisories/CVE-2020-0008.md)
  `CVE-2020-0008` · CVE record: Android · No CVSS score · Not analysed yet · Published 8 Jan 2020
- [Android: In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap…](https://agentprime.io/advisories/CVE-2020-0007.md)
  `CVE-2020-0007` · CVE record: Android · No CVSS score · Not analysed yet · Published 8 Jan 2020
- [Android: In rw_i93_send_cmd_write_single_block of rw_i93.cc…](https://agentprime.io/advisories/CVE-2020-0006.md)
  `CVE-2020-0006` · CVE record: Android · No CVSS score · Not analysed yet · Published 8 Jan 2020
- [Android: In generateCrop of WallpaperManagerService.java…](https://agentprime.io/advisories/CVE-2020-0004.md)
  `CVE-2020-0004` · CVE record: Android · No CVSS score · Not analysed yet · Published 8 Jan 2020
- [Android: In onCreate of InstallStart.java, there is a possible package validation bypass due to a…](https://agentprime.io/advisories/CVE-2020-0003.md)
  `CVE-2020-0003` · CVE record: Android · No CVSS score · Not analysed yet · Published 8 Jan 2020
- [Android: In ih264d_init_decoder of ih264d_api.c…](https://agentprime.io/advisories/CVE-2020-0002.md)
  `CVE-2020-0002` · CVE record: Android · No CVSS score · Not analysed yet · Published 8 Jan 2020
- [In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly.](https://agentprime.io/advisories/CVE-2020-0001.md)
  `CVE-2020-0001` · CVE record: Android · No CVSS score · Not analysed yet · Published 8 Jan 2020
- [Android: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory…](https://agentprime.io/advisories/CVE-2020-0009.md)
  `CVE-2020-0009` · CVE record: Android · No CVSS score · Not analysed yet · Published 8 Jan 2020
- [Android: In the Titan M handling of cryptographic operations…](https://agentprime.io/advisories/CVE-2019-9465.md)
  `CVE-2019-9465` · CVE record: Android · No CVSS score · Not analysed yet · Published 7 Jan 2020
- [In export_key_der of export_key.cpp, there is possible memory corruption due to a double free.](https://agentprime.io/advisories/CVE-2019-9468.md)
  `CVE-2019-9468` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Jan 2020
- [Android: In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to…](https://agentprime.io/advisories/CVE-2019-9469.md)
  `CVE-2019-9469` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Jan 2020
- [Android: In dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing…](https://agentprime.io/advisories/CVE-2019-9470.md)
  `CVE-2019-9470` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Jan 2020
- [Android: In set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a…](https://agentprime.io/advisories/CVE-2019-9471.md)
  `CVE-2019-9471` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Jan 2020
- [In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto.](https://agentprime.io/advisories/CVE-2019-9472.md)
  `CVE-2019-9472` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Jan 2020
- [Android: In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper…](https://agentprime.io/advisories/CVE-2019-2231.md)
  `CVE-2019-2231` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [Android: In nfcManager_routeAid and nfcManager_unrouteAid of NativeNfcManager.cpp…](https://agentprime.io/advisories/CVE-2019-2230.md)
  `CVE-2019-2230` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [Android: In updateWidget of BaseWidgetProvider.java…](https://agentprime.io/advisories/CVE-2019-2229.md)
  `CVE-2019-2229` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check.](https://agentprime.io/advisories/CVE-2019-2228.md)
  `CVE-2019-2228` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [In DeepCopy of btif_av.cc, there is a possible out of bounds read due to improper casting.](https://agentprime.io/advisories/CVE-2019-2227.md)
  `CVE-2019-2227` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [Android: In device_class_to_int of device_class.cc…](https://agentprime.io/advisories/CVE-2019-2226.md)
  `CVE-2019-2226` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [Android: When pairing with a Bluetooth device…](https://agentprime.io/advisories/CVE-2019-2225.md)
  `CVE-2019-2225` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [Android: In ihevcd_ref_list of ihevcd_ref_list.c…](https://agentprime.io/advisories/CVE-2019-2223.md)
  `CVE-2019-2223` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [Android: n ihevcd_parse_slice_data of ihevcd_parse_slice.c…](https://agentprime.io/advisories/CVE-2019-2222.md)
  `CVE-2019-2222` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [Android: In hasActivityInVisibleTask of WindowProcessController.java there’s a possible bypass of…](https://agentprime.io/advisories/CVE-2019-2221.md)
  `CVE-2019-2221` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [Android: In several functions of NotificationManagerService.java and related files…](https://agentprime.io/advisories/CVE-2019-2219.md)
  `CVE-2019-2219` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [Android: In various functions of RecentLocationApps.java, DevicePolicyManagerService.java…](https://agentprime.io/advisories/CVE-2019-9464.md)
  `CVE-2019-9464` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [Android: In handleRun of TextLine.java, there is a possible application crash due to improper…](https://agentprime.io/advisories/CVE-2019-2232.md)
  `CVE-2019-2232` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [Android: In checkOperation of AppOpsService.java…](https://agentprime.io/advisories/CVE-2019-2220.md)
  `CVE-2019-2220` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [Android: In createSessionInternal of PackageInstallerService.java…](https://agentprime.io/advisories/CVE-2019-2218.md)
  `CVE-2019-2218` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [In setCpuVulkanInUse of GpuStats.cpp, there is possible memory corruption due to a use after free.](https://agentprime.io/advisories/CVE-2019-2217.md)
  `CVE-2019-2217` · CVE record: Android · No CVSS score · Not analysed yet · Published 6 Dec 2019
- [In the Bootloader, there is a possible kernel command injection due to missing command sanitization.](https://agentprime.io/advisories/CVE-2019-9467.md)
  `CVE-2019-9467` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In load_logging_config of qmi_vs_service.cc…](https://agentprime.io/advisories/CVE-2019-2210.md)
  `CVE-2019-2210` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In binder_transaction of binder.c, there is a possible out of bounds write due to a…](https://agentprime.io/advisories/CVE-2019-2214.md)
  `CVE-2019-2214` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition.](https://agentprime.io/advisories/CVE-2019-2213.md)
  `CVE-2019-2213` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [Android: In okToConnect of HidHostService.java…](https://agentprime.io/advisories/CVE-2019-2036.md)
  `CVE-2019-2036` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [In Download Provider, there is a possible SQL injection vulnerability.](https://agentprime.io/advisories/CVE-2019-2198.md)
  `CVE-2019-2198` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019
- [In Download Provider, there is possible SQL injection.](https://agentprime.io/advisories/CVE-2019-2196.md)
  `CVE-2019-2196` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Nov 2019

Newest: <https://agentprime.io/advisories/technology/android.md>
Older: <https://agentprime.io/advisories/technology/android.md?cursor=WyIyMDE5LTExLTEzVDE3OjQzOjM0LjAwMDAwMFoiLCJDVkUtMjAxOS0yMTk2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=android&cursor=WyIyMDIwLTAzLTEwVDE5OjU2OjA5LjAwMDAwMFoiLCJDVkUtMjAyMC0wMDM2Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/android/?cursor=WyIyMDIwLTAzLTEwVDE5OjU2OjA5LjAwMDAwMFoiLCJDVkUtMjAyMC0wMDM2Il0>. Everything for agents: <https://agentprime.io/llms.txt>.