# Android.

Every CVE that names Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [There is a Unauthorized service in the system service, may cause the system reboot.](https://agentprime.io/advisories/CVE-2022-20435.md)
  `CVE-2022-20435` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [There is an missing authorization issue in the system service.](https://agentprime.io/advisories/CVE-2022-20434.md)
  `CVE-2022-20434` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [There is an missing authorization issue in the system service.](https://agentprime.io/advisories/CVE-2022-20433.md)
  `CVE-2022-20433` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [There is an missing authorization issue in the system service.](https://agentprime.io/advisories/CVE-2022-20432.md)
  `CVE-2022-20432` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [There is an missing authorization issue in the system service.](https://agentprime.io/advisories/CVE-2022-20431.md)
  `CVE-2022-20431` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [There is an missing authorization issue in the system service.](https://agentprime.io/advisories/CVE-2022-20430.md)
  `CVE-2022-20430` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [In CarSettings of app packages, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2022-20429.md)
  `CVE-2022-20429` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In addAutomaticZenRule of ZenModeHelper.java…](https://agentprime.io/advisories/CVE-2022-20425.md)
  `CVE-2022-20425` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In rndis_set_response of rndis.c, there is a possible out of bounds write due to an…](https://agentprime.io/advisories/CVE-2022-20423.md)
  `CVE-2022-20423` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In emulation_proc_handler of armv8_deprecated.c…](https://agentprime.io/advisories/CVE-2022-20422.md)
  `CVE-2022-20422` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In binder_inc_ref_for_node of binder.c…](https://agentprime.io/advisories/CVE-2022-20421.md)
  `CVE-2022-20421` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In getBackgroundRestrictionExemptionReason of AppRestrictionController.java…](https://agentprime.io/advisories/CVE-2022-20420.md)
  `CVE-2022-20420` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In setOptions of ActivityRecord.java…](https://agentprime.io/advisories/CVE-2022-20419.md)
  `CVE-2022-20419` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In pickStartSeq of AAVCAssembler.cpp…](https://agentprime.io/advisories/CVE-2022-20418.md)
  `CVE-2022-20418` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In audioTransportsToHal of HidlUtils.cpp…](https://agentprime.io/advisories/CVE-2022-20417.md)
  `CVE-2022-20417` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In audioTransportsToHal of HidlUtils.cpp…](https://agentprime.io/advisories/CVE-2022-20416.md)
  `CVE-2022-20416` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In handleFullScreenIntent of StatusBarNotificationActivityStarter.java…](https://agentprime.io/advisories/CVE-2022-20415.md)
  `CVE-2022-20415` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In start of Threads.cpp, there is a possible way to record audio during a phone call due…](https://agentprime.io/advisories/CVE-2022-20413.md)
  `CVE-2022-20413` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check.](https://agentprime.io/advisories/CVE-2022-20412.md)
  `CVE-2022-20412` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc…](https://agentprime.io/advisories/CVE-2022-20410.md)
  `CVE-2022-20410` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free.](https://agentprime.io/advisories/CVE-2022-20409.md)
  `CVE-2022-20409` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In getInputMethodWindowVisibleHeight of InputMethodManagerService.java…](https://agentprime.io/advisories/CVE-2022-20394.md)
  `CVE-2022-20394` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In queryInternal of CallLogProvider.java…](https://agentprime.io/advisories/CVE-2022-20351.md)
  `CVE-2022-20351` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Android: In DevmemIntHeapAcquire of TBD, there is a possible arbitrary code execution due to an…](https://agentprime.io/advisories/CVE-2021-0951.md)
  `CVE-2021-0951` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition.](https://agentprime.io/advisories/CVE-2021-0696.md)
  `CVE-2021-0696` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [In sysmmu_unmap of TBD, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2022-20364.md)
  `CVE-2022-20364` · CVE record: Android · No CVSS score · Not analysed yet · Published 14 Sept 2022
- [Android: In smc_intc_request_fiq of arm_gic.c…](https://agentprime.io/advisories/CVE-2022-20231.md)
  `CVE-2022-20231` · CVE record: Android · No CVSS score · Not analysed yet · Published 14 Sept 2022
- [Android: In the SEPolicy configuration of system apps…](https://agentprime.io/advisories/CVE-2022-20399.md)
  `CVE-2022-20399` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Sept 2022
- [Android: In addOrUpdateNetwork of WifiServiceImpl.java…](https://agentprime.io/advisories/CVE-2022-20398.md)
  `CVE-2022-20398` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Sept 2022
- [Android: In SettingsActivity.java, there is a possible way to make a device discoverable over…](https://agentprime.io/advisories/CVE-2022-20396.md)
  `CVE-2022-20396` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Sept 2022
- [Android: In checkAccess of MediaProvider.java…](https://agentprime.io/advisories/CVE-2022-20395.md)
  `CVE-2022-20395` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Sept 2022
- [Android: In extract3GPPGlobalDescriptions of TextDescriptions.cpp…](https://agentprime.io/advisories/CVE-2022-20393.md)
  `CVE-2022-20393` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Sept 2022
- [Improper input validation in Android](https://agentprime.io/advisories/CVE-2022-20392.md)
  `CVE-2022-20392` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 13 Sept 2022 · Tags: CWE-20
- [Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000](https://agentprime.io/advisories/CVE-2022-20391.md)
  `CVE-2022-20391` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Sept 2022
- [Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257002](https://agentprime.io/advisories/CVE-2022-20390.md)
  `CVE-2022-20390` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Sept 2022
- [Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004](https://agentprime.io/advisories/CVE-2022-20389.md)
  `CVE-2022-20389` · CVE record: Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Sept 2022
- [Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323](https://agentprime.io/advisories/CVE-2022-20388.md)
  `CVE-2022-20388` · CVE record: Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Sept 2022
- [Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227324](https://agentprime.io/advisories/CVE-2022-20387.md)
  `CVE-2022-20387` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Sept 2022
- [Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328](https://agentprime.io/advisories/CVE-2022-20386.md)
  `CVE-2022-20386` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Sept 2022
- [Android: a function called 'nla_parse', do not check the len of para…](https://agentprime.io/advisories/CVE-2022-20385.md)
  `CVE-2022-20385` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Sept 2022
- [In MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation.](https://agentprime.io/advisories/CVE-2021-0943.md)
  `CVE-2021-0943` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Sept 2022
- [The path in this case is a little bit convoluted.](https://agentprime.io/advisories/CVE-2021-0942.md)
  `CVE-2021-0942` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Sept 2022
- [Android: In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver…](https://agentprime.io/advisories/CVE-2021-0871.md)
  `CVE-2021-0871` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Sept 2022
- [Android: In PVRSRVRGXSubmitTransferKM of rgxtransfer.c…](https://agentprime.io/advisories/CVE-2021-0697.md)
  `CVE-2021-0697` · CVE record: Android · No CVSS score · Not analysed yet · Published 13 Sept 2022
- [Android: The PowerVR GPU driver allows unprivileged apps to allocated pinned memory…](https://agentprime.io/advisories/CVE-2022-20122.md)
  `CVE-2022-20122` · CVE record: Android · No CVSS score · Not analysed yet · Published 24 Aug 2022
- [Android: The PowerVR GPU driver allows unprivileged apps to allocated pinned memory…](https://agentprime.io/advisories/CVE-2021-39815.md)
  `CVE-2021-39815` · CVE record: Android · No CVSS score · Not analysed yet · Published 24 Aug 2022
- [Android: The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap…](https://agentprime.io/advisories/CVE-2021-0947.md)
  `CVE-2021-0947` · CVE record: Android · No CVSS score · Not analysed yet · Published 24 Aug 2022
- [Android: The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap…](https://agentprime.io/advisories/CVE-2021-0946.md)
  `CVE-2021-0946` · CVE record: Android · No CVSS score · Not analysed yet · Published 24 Aug 2022
- [Android: An unprivileged app can trigger PowerVR driver to return an uninitialized heap memory…](https://agentprime.io/advisories/CVE-2021-0891.md)
  `CVE-2021-0891` · CVE record: Android · No CVSS score · Not analysed yet · Published 24 Aug 2022
- [Android: In PVRSRVBridgeHeapCfgHeapConfigName…](https://agentprime.io/advisories/CVE-2021-0887.md)
  `CVE-2021-0887` · CVE record: Android · No CVSS score · Not analysed yet · Published 24 Aug 2022
- [Android: In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to…](https://agentprime.io/advisories/CVE-2021-0698.md)
  `CVE-2021-0698` · CVE record: Android · No CVSS score · Not analysed yet · Published 24 Aug 2022
- [In Bluetooth, there is a possible out of bounds write due to an integer overflow.](https://agentprime.io/advisories/CVE-2022-20362.md)
  `CVE-2022-20362` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Aug 2022
- [Android: In WiFi, there is a possible disclosure of WiFi password to the end user due to an…](https://agentprime.io/advisories/CVE-2022-20342.md)
  `CVE-2022-20342` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Aug 2022
- [Android: In ConnectivityService, there is a possible bypass of network permissions due to a…](https://agentprime.io/advisories/CVE-2022-20341.md)
  `CVE-2022-20341` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Aug 2022
- [Android: In SELinux policy, there is a possible way of inferring which websites are being opened…](https://agentprime.io/advisories/CVE-2022-20340.md)
  `CVE-2022-20340` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Aug 2022
- [Android: In Android, there is a possible access of network neighbor table information due to an…](https://agentprime.io/advisories/CVE-2022-20339.md)
  `CVE-2022-20339` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Aug 2022
- [In Settings, there is a possible installed application disclosure due to a missing permission check.](https://agentprime.io/advisories/CVE-2022-20336.md)
  `CVE-2022-20336` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Aug 2022
- [Android: In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission…](https://agentprime.io/advisories/CVE-2022-20335.md)
  `CVE-2022-20335` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Aug 2022
- [In Bluetooth, there are possible process crashes due to dereferencing a null pointer.](https://agentprime.io/advisories/CVE-2022-20334.md)
  `CVE-2022-20334` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Aug 2022
- [In Bluetooth, there is a possible crash due to a missing null check.](https://agentprime.io/advisories/CVE-2022-20333.md)
  `CVE-2022-20333` · CVE record: Android · No CVSS score · Not analysed yet · Published 11 Aug 2022

Newest: <https://agentprime.io/advisories/technology/android.md>
Older: <https://agentprime.io/advisories/technology/android.md?cursor=WyIyMDIyLTA4LTExVDE1OjI5OjE0LjAwMDAwMFoiLCJDVkUtMjAyMi0yMDMzMyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=android&cursor=WyIyMDIyLTEwLTExVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi0yMDQzNiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/android/?cursor=WyIyMDIyLTEwLTExVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi0yMDQzNiJd>. Everything for agents: <https://agentprime.io/llms.txt>.