# Android.

Every CVE that names Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Android: In multiple functions of AvatarPhotoController.java…](https://agentprime.io/advisories/CVE-2022-20144.md)
  `CVE-2022-20144` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In deletePackageX of DeletePackageHelper.java…](https://agentprime.io/advisories/CVE-2022-20124.md)
  `CVE-2022-20124` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In getNodeValue of USCCDMPlugin.java…](https://agentprime.io/advisories/CVE-2022-20121.md)
  `CVE-2022-20121` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A](https://agentprime.io/advisories/CVE-2022-20120.md)
  `CVE-2022-20120` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In private_handle_t of mali_gralloc_buffer.h…](https://agentprime.io/advisories/CVE-2022-20119.md)
  `CVE-2022-20119` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In ion_ioctl and related functions of ion.c…](https://agentprime.io/advisories/CVE-2022-20118.md)
  `CVE-2022-20118` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due…](https://agentprime.io/advisories/CVE-2022-20117.md)
  `CVE-2022-20117` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In CarSetings, there is a possible to pair BT device bypassing user's consent due to a…](https://agentprime.io/advisories/CVE-2021-39738.md)
  `CVE-2021-39738` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In onEntryUpdated of OngoingCallController.kt…](https://agentprime.io/advisories/CVE-2022-20116.md)
  `CVE-2022-20116` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In broadcastServiceStateChanged of TelephonyRegistry.java…](https://agentprime.io/advisories/CVE-2022-20115.md)
  `CVE-2022-20115` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In placeCall of TelecomManager.java, there is a possible way for an application to keep…](https://agentprime.io/advisories/CVE-2022-20114.md)
  `CVE-2022-20114` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In mPreference of DefaultUsbConfigurationPreferenceController.java…](https://agentprime.io/advisories/CVE-2022-20113.md)
  `CVE-2022-20113` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In getAvailabilityStatus of PrivateDnsPreferenceController.java…](https://agentprime.io/advisories/CVE-2022-20112.md)
  `CVE-2022-20112` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In getArray of NotificationManagerService.java…](https://agentprime.io/advisories/CVE-2022-20011.md)
  `CVE-2022-20011` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In l2cble_process_sig_cmd of l2c_ble.cc…](https://agentprime.io/advisories/CVE-2022-20010.md)
  `CVE-2022-20010` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In various functions of the USB gadget subsystem…](https://agentprime.io/advisories/CVE-2022-20009.md)
  `CVE-2022-20009` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due…](https://agentprime.io/advisories/CVE-2022-20008.md)
  `CVE-2022-20008` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java…](https://agentprime.io/advisories/CVE-2022-20007.md)
  `CVE-2022-20007` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In several functions of KeyguardServiceWrapper.java and related files…](https://agentprime.io/advisories/CVE-2022-20006.md)
  `CVE-2022-20006` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In validateApkInstallLocked of PackageInstallerSession.java…](https://agentprime.io/advisories/CVE-2022-20005.md)
  `CVE-2022-20005` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In checkSlicePermission of SliceManagerService.java…](https://agentprime.io/advisories/CVE-2022-20004.md)
  `CVE-2022-20004` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In the policies of adbd.te, there was a logic error which caused the CTS Listening Ports…](https://agentprime.io/advisories/CVE-2021-39700.md)
  `CVE-2021-39700` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In setStream of WallpaperManager.java…](https://agentprime.io/advisories/CVE-2021-39670.md)
  `CVE-2021-39670` · CVE record: Android · No CVSS score · Not analysed yet · Published 10 May 2022
- [Android: In ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an…](https://agentprime.io/advisories/CVE-2021-39814.md)
  `CVE-2021-39814` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [In TBD of TBD, there is a possible out of bounds read due to a use after free.](https://agentprime.io/advisories/CVE-2021-39812.md)
  `CVE-2021-39812` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [Android: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc…](https://agentprime.io/advisories/CVE-2021-39809.md)
  `CVE-2021-39809` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [Android: In createNotificationChannelGroup of PreferencesHelper.java…](https://agentprime.io/advisories/CVE-2021-39808.md)
  `CVE-2021-39808` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [Android: In handleNfcStateChanged of SecureNfcEnabler.java…](https://agentprime.io/advisories/CVE-2021-39807.md)
  `CVE-2021-39807` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [Android: In l2cble_process_sig_cmd of l2c_ble.cc…](https://agentprime.io/advisories/CVE-2021-39805.md)
  `CVE-2021-39805` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check.](https://agentprime.io/advisories/CVE-2021-39804.md)
  `CVE-2021-39804` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [In \~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free.](https://agentprime.io/advisories/CVE-2021-39803.md)
  `CVE-2021-39803` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [Android: In change_pte_range of mprotect.c , there is a possible way to make a shared mmap…](https://agentprime.io/advisories/CVE-2021-39802.md)
  `CVE-2021-39802` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking.](https://agentprime.io/advisories/CVE-2021-39801.md)
  `CVE-2021-39801` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [Android: In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a…](https://agentprime.io/advisories/CVE-2021-39800.md)
  `CVE-2021-39800` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [Android: In AttributionSource of AttributionSource.java…](https://agentprime.io/advisories/CVE-2021-39799.md)
  `CVE-2021-39799` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [Android: In Bitmap_createFromParcel of Bitmap.cpp…](https://agentprime.io/advisories/CVE-2021-39798.md)
  `CVE-2021-39798` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [Android: In several functions of of LauncherApps.java…](https://agentprime.io/advisories/CVE-2021-39797.md)
  `CVE-2021-39797` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [Android: In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java…](https://agentprime.io/advisories/CVE-2021-39796.md)
  `CVE-2021-39796` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [Android: In broadcastPortInfo of AdbService.java…](https://agentprime.io/advisories/CVE-2021-39794.md)
  `CVE-2021-39794` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free.](https://agentprime.io/advisories/CVE-2021-0707.md)
  `CVE-2021-0707` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [Android: In setServiceForegroundInnerLocked of ActiveServices.java…](https://agentprime.io/advisories/CVE-2021-0694.md)
  `CVE-2021-0694` · CVE record: Android · No CVSS score · Not analysed yet · Published 12 Apr 2022
- [Android: In ContextImpl, there is a possible way to determine whether an app is installed…](https://agentprime.io/advisories/CVE-2021-39754.md)
  `CVE-2021-39754` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [In incfs, there is a possible way of mounting on arbitrary paths due to a missing permission check.](https://agentprime.io/advisories/CVE-2022-20002.md)
  `CVE-2022-20002` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [Android: In WallpaperManagerService, there is a possible way to determine whether an app is…](https://agentprime.io/advisories/CVE-2021-39791.md)
  `CVE-2021-39791` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [Android: In Dialer, there is a possible way to manipulate visual voicemail settings due to a…](https://agentprime.io/advisories/CVE-2021-39790.md)
  `CVE-2021-39790` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [In Telecom, there is a possible leak of TTY mode change due to a missing permission check.](https://agentprime.io/advisories/CVE-2021-39789.md)
  `CVE-2021-39789` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [Android: In TelecomManager, there is a possible way to check if a particular self managed phone…](https://agentprime.io/advisories/CVE-2021-39788.md)
  `CVE-2021-39788` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [In SystemUI, there is a possible arbitrary Activity launch due to a confused deputy.](https://agentprime.io/advisories/CVE-2021-39787.md)
  `CVE-2021-39787` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [In NFC, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2021-39786.md)
  `CVE-2021-39786` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [Android: In CellBroadcastReceiver, there is a possible path to enable specific cellular features…](https://agentprime.io/advisories/CVE-2021-39784.md)
  `CVE-2021-39784` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [In rcsservice, there is a possible way to modify TTY mode due to a missing permission check.](https://agentprime.io/advisories/CVE-2021-39783.md)
  `CVE-2021-39783` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [Android: In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a…](https://agentprime.io/advisories/CVE-2021-39782.md)
  `CVE-2021-39782` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [In SmsController, there is a possible information disclosure due to a permissions bypass.](https://agentprime.io/advisories/CVE-2021-39781.md)
  `CVE-2021-39781` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [Android: In Traceur, there is a possible bypass of developer settings requirements for capturing…](https://agentprime.io/advisories/CVE-2021-39780.md)
  `CVE-2021-39780` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [In getCallStateUsingPackage of Telecom Service, there is a missing permission check.](https://agentprime.io/advisories/CVE-2021-39779.md)
  `CVE-2021-39779` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [Android: In Telecomm, there is a possible way to determine whether an app is installed…](https://agentprime.io/advisories/CVE-2021-39778.md)
  `CVE-2021-39778` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [Android: In Telephony, there is a possible way to determine whether an app is installed…](https://agentprime.io/advisories/CVE-2021-39777.md)
  `CVE-2021-39777` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [In NFC, there is a possible memory corruption due to a use after free.](https://agentprime.io/advisories/CVE-2021-39776.md)
  `CVE-2021-39776` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [Android: In People, there is a possible way to determine whether an app is installed…](https://agentprime.io/advisories/CVE-2021-39775.md)
  `CVE-2021-39775` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022
- [In Bluetooth, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2021-39774.md)
  `CVE-2021-39774` · CVE record: Android · No CVSS score · Not analysed yet · Published 30 Mar 2022

Newest: <https://agentprime.io/advisories/technology/android.md>
Older: <https://agentprime.io/advisories/technology/android.md?cursor=WyIyMDIyLTAzLTMwVDE2OjAyOjM5LjAwMDAwMFoiLCJDVkUtMjAyMS0zOTc3NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=android&cursor=WyIyMDIyLTA2LTE1VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi0yMDE4NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/android/?cursor=WyIyMDIyLTA2LTE1VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi0yMDE4NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.