# Android.

Every CVE that names Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A](https://agentprime.io/advisories/CVE-2022-20365.md)
  `CVE-2022-20365` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Aug 2022
- [Android: In BuildDevIDResponse of miscdatabuilder.cpp…](https://agentprime.io/advisories/CVE-2022-20237.md)
  `CVE-2022-20237` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Aug 2022
- [Android: In several functions of mali_gralloc_reference.cpp…](https://agentprime.io/advisories/CVE-2022-20180.md)
  `CVE-2022-20180` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Aug 2022
- [Use after free in Android](https://agentprime.io/advisories/CVE-2022-20158.md)
  `CVE-2022-20158` · CVE record: Android · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2022 · Tags: Memory corruption
- [Android: In v4l2_m2m_querybuf of v4l2-mem2mem.c…](https://agentprime.io/advisories/CVE-2022-20369.md)
  `CVE-2022-20369` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Aug 2022
- [Improper input validation in Android](https://agentprime.io/advisories/CVE-2022-20338.md)
  `CVE-2022-20338` · CVE record: Android · CVSS 3.3 Low · Not analysed yet · Published 11 Aug 2022 · Tags: CWE-20
- [Improper privilege management in Android](https://agentprime.io/advisories/CVE-2022-20361.md)
  `CVE-2022-20361` · CVE record: Android · CVSS 6.5 Medium · Not analysed yet · Published 9 Aug 2022 · Tags: Privilege escalation
- [Improper privilege management in Android](https://agentprime.io/advisories/CVE-2022-20360.md)
  `CVE-2022-20360` · CVE record: Android · CVSS 6.2 Medium · Not analysed yet · Published 9 Aug 2022 · Tags: Privilege escalation
- [Improper access control in Android](https://agentprime.io/advisories/CVE-2022-20358.md)
  `CVE-2022-20358` · CVE record: Android · CVSS 7.1 High · Not analysed yet · Published 9 Aug 2022 · Tags: Broken access control
- [Android: In writeToParcel of SurfaceControl.cpp…](https://agentprime.io/advisories/CVE-2022-20357.md)
  `CVE-2022-20357` · CVE record: Android · No CVSS score · Not analysed yet · Published 9 Aug 2022
- [Improper privilege management in Android](https://agentprime.io/advisories/CVE-2022-20356.md)
  `CVE-2022-20356` · CVE record: Android · CVSS 4.0 Medium · Not analysed yet · Published 9 Aug 2022 · Tags: Privilege escalation
- [Android: In get of PacProxyService.java, there is a possible system service crash due to improper…](https://agentprime.io/advisories/CVE-2022-20355.md)
  `CVE-2022-20355` · CVE record: Android · No CVSS score · Not analysed yet · Published 9 Aug 2022
- [Android: In onDefaultNetworkChanged of Vpn.java…](https://agentprime.io/advisories/CVE-2022-20354.md)
  `CVE-2022-20354` · CVE record: Android · No CVSS score · Not analysed yet · Published 9 Aug 2022
- [Android: In onSaveRingtone of DefaultRingtonePreference.java…](https://agentprime.io/advisories/CVE-2022-20353.md)
  `CVE-2022-20353` · CVE record: Android · No CVSS score · Not analysed yet · Published 9 Aug 2022
- [Android: In addProviderRequestListener of LocationManagerService.java…](https://agentprime.io/advisories/CVE-2022-20352.md)
  `CVE-2022-20352` · CVE record: Android · No CVSS score · Not analysed yet · Published 9 Aug 2022
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2022-20350.md)
  `CVE-2022-20350` · CVE record: Android · CVSS 6.2 Medium · Not analysed yet · Published 9 Aug 2022 · Tags: Memory corruption
- [Android: In WifiScanningPreferenceController and BluetoothScanningPreferenceController…](https://agentprime.io/advisories/CVE-2022-20349.md)
  `CVE-2022-20349` · CVE record: Android · No CVSS score · Not analysed yet · Published 9 Aug 2022
- [Android: In updateState of LocationServicesWifiScanningPreferenceController.java…](https://agentprime.io/advisories/CVE-2022-20348.md)
  `CVE-2022-20348` · CVE record: Android · No CVSS score · Not analysed yet · Published 9 Aug 2022
- [Improper privilege management in Android](https://agentprime.io/advisories/CVE-2022-20347.md)
  `CVE-2022-20347` · CVE record: Android · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022 · Tags: Privilege escalation
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2022-20346.md)
  `CVE-2022-20346` · CVE record: Android · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022 · Tags: Memory corruption
- [Command injection in Android](https://agentprime.io/advisories/CVE-2022-20345.md)
  `CVE-2022-20345` · CVE record: Android · CVSS 6.5 Medium · Not analysed yet · Published 9 Aug 2022 · Tags: Command injection
- [Android: In stealReceiveChannel of EventThread.cpp…](https://agentprime.io/advisories/CVE-2022-20344.md)
  `CVE-2022-20344` · CVE record: Android · No CVSS score · Not analysed yet · Published 9 Aug 2022
- [Improper privilege management in Android](https://agentprime.io/advisories/CVE-2022-20239.md)
  `CVE-2022-20239` · CVE record: Android · CVSS 4.2 Medium · Not analysed yet · Published 9 Aug 2022 · Tags: Privilege escalation
- [In Task.java, there is a possible escalation of privilege due to a confused deputy.](https://agentprime.io/advisories/CVE-2021-39696.md)
  `CVE-2021-39696` · CVE record: Android · No CVSS score · Not analysed yet · Published 9 Aug 2022
- [In Car Settings app, the NotificationAccessConfirmationActivity is exported.](https://agentprime.io/advisories/CVE-2022-20234.md)
  `CVE-2022-20234` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: In wifi.RequestToggleWifiActivity of AndroidManifest.xml…](https://agentprime.io/advisories/CVE-2022-20212.md)
  `CVE-2022-20212` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: 'remap_pfn_range' here may map out of size kernel memory (for example…](https://agentprime.io/advisories/CVE-2022-20238.md)
  `CVE-2022-20238` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: A drm driver have oob problem, could cause the system crash or EOPProduct…](https://agentprime.io/advisories/CVE-2022-20236.md)
  `CVE-2022-20236` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: In choosePrivateKeyAlias of KeyChain.java…](https://agentprime.io/advisories/CVE-2022-20230.md)
  `CVE-2022-20230` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc…](https://agentprime.io/advisories/CVE-2022-20229.md)
  `CVE-2022-20229` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: In various functions of C2DmaBufAllocator.cpp…](https://agentprime.io/advisories/CVE-2022-20228.md)
  `CVE-2022-20228` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [In USB driver, there is a possible out of bounds read due to a heap buffer overflow.](https://agentprime.io/advisories/CVE-2022-20227.md)
  `CVE-2022-20227` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: In finishDrawingWindow of WindowManagerService.java…](https://agentprime.io/advisories/CVE-2022-20226.md)
  `CVE-2022-20226` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: In getSubscriptionProperty of SubscriptionController.java…](https://agentprime.io/advisories/CVE-2022-20225.md)
  `CVE-2022-20225` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: In AT_SKIP_REST of bta_hf_client_at.cc…](https://agentprime.io/advisories/CVE-2022-20224.md)
  `CVE-2022-20224` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: In assertSafeToStartCustomActivity of AppRestrictionsFragment.java…](https://agentprime.io/advisories/CVE-2022-20223.md)
  `CVE-2022-20223` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a…](https://agentprime.io/advisories/CVE-2022-20222.md)
  `CVE-2022-20222` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc…](https://agentprime.io/advisories/CVE-2022-20221.md)
  `CVE-2022-20221` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: In openFile of CallLogProvider.java, there is a possible permission bypass due to a path…](https://agentprime.io/advisories/CVE-2022-20220.md)
  `CVE-2022-20220` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: In multiple functions of StorageManagerService.java and UserManagerService.java…](https://agentprime.io/advisories/CVE-2022-20219.md)
  `CVE-2022-20219` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: In PermissionController, there is a possible way to get and retain permissions without…](https://agentprime.io/advisories/CVE-2022-20218.md)
  `CVE-2022-20218` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [There is a unauthorized broadcast in the SprdContactsProvider.](https://agentprime.io/advisories/CVE-2022-20217.md)
  `CVE-2022-20217` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [Android: android exported is used to set third-party app access permissions…](https://agentprime.io/advisories/CVE-2022-20216.md)
  `CVE-2022-20216` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Jul 2022
- [In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files.](https://agentprime.io/advisories/CVE-2022-20203.md)
  `CVE-2022-20203` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In param_find_digests_internal and related functions of the Titan-M source…](https://agentprime.io/advisories/CVE-2022-20233.md)
  `CVE-2022-20233` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In hme_add_new_node_to_a_sorted_array of hme_utils.c…](https://agentprime.io/advisories/CVE-2022-20209.md)
  `CVE-2022-20209` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In parseRecursively of cppbor_parse.cpp…](https://agentprime.io/advisories/CVE-2022-20208.md)
  `CVE-2022-20208` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In static definitions of GattServiceConfig.java…](https://agentprime.io/advisories/CVE-2022-20207.md)
  `CVE-2022-20207` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In setPackageOrComponentEnabled of NotificationManagerService.java…](https://agentprime.io/advisories/CVE-2022-20206.md)
  `CVE-2022-20206` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file://…](https://agentprime.io/advisories/CVE-2022-20205.md)
  `CVE-2022-20205` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In registerRemoteBugreportReceivers of DevicePolicyManagerService.java…](https://agentprime.io/advisories/CVE-2022-20204.md)
  `CVE-2022-20204` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In ih264_resi_trans_quant_4x4_sse42 of ih264_resi_trans_quant_sse42.c…](https://agentprime.io/advisories/CVE-2022-20202.md)
  `CVE-2022-20202` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In getAppSize of InstalldNativeService.cpp…](https://agentprime.io/advisories/CVE-2022-20201.md)
  `CVE-2022-20201` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In updateApState of SoftApManager.java…](https://agentprime.io/advisories/CVE-2022-20200.md)
  `CVE-2022-20200` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In llcp_dlc_proc_connect_pdu of llcp_dlc.cc…](https://agentprime.io/advisories/CVE-2022-20198.md)
  `CVE-2022-20198` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In recycle of Parcel.java, there is a possible way to start foreground activity from…](https://agentprime.io/advisories/CVE-2022-20197.md)
  `CVE-2022-20197` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [In gallery3d and photos, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2022-20196.md)
  `CVE-2022-20196` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In the keystore library, there is a possible prevention of access to system Settings due…](https://agentprime.io/advisories/CVE-2022-20195.md)
  `CVE-2022-20195` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [In onCreate of ChooseLockGeneric.java, there is a possible permission bypass.](https://agentprime.io/advisories/CVE-2022-20194.md)
  `CVE-2022-20194` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022
- [Android: In getUniqueUsagesWithLabels of PermissionUsageHelper.java…](https://agentprime.io/advisories/CVE-2022-20193.md)
  `CVE-2022-20193` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2022

Newest: <https://agentprime.io/advisories/technology/android.md>
Older: <https://agentprime.io/advisories/technology/android.md?cursor=WyIyMDIyLTA2LTE1VDEzOjIyOjQ2LjAwMDAwMFoiLCJDVkUtMjAyMi0yMDE5MyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=android&cursor=WyIyMDIyLTA4LTExVDE0OjU5OjExLjAwMDAwMFoiLCJDVkUtMjAyMi0yMDM2NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/android/?cursor=WyIyMDIyLTA4LTExVDE0OjU5OjExLjAwMDAwMFoiLCJDVkUtMjAyMi0yMDM2NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.