# Android.

Every CVE that names Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Buffer overflow in Android](https://agentprime.io/advisories/CVE-2022-20560.md)
  `CVE-2022-20560` · CVE record: Android · CVSS 7.5 High · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Observable discrepancy in Android](https://agentprime.io/advisories/CVE-2022-20559.md)
  `CVE-2022-20559` · CVE record: Android · CVSS 3.3 Low · Not analysed yet · Published 16 Dec 2022 · Tags: Information disclosure
- [Incorrect authorization in Android](https://agentprime.io/advisories/CVE-2022-20558.md)
  `CVE-2022-20558` · CVE record: Android · CVSS 3.3 Low · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2022-20557.md)
  `CVE-2022-20557` · CVE record: Android · CVSS 6.7 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20556.md)
  `CVE-2022-20556` · CVE record: Android · CVSS 3.3 Low · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2022-20555.md)
  `CVE-2022-20555` · CVE record: Android · CVSS 4.4 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Use after free in Android](https://agentprime.io/advisories/CVE-2022-20554.md)
  `CVE-2022-20554` · CVE record: Android · CVSS 6.7 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Clickjacking in Android](https://agentprime.io/advisories/CVE-2022-20553.md)
  `CVE-2022-20553` · CVE record: Android · CVSS 6.5 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-1021
- [Use after free in Android](https://agentprime.io/advisories/CVE-2022-20552.md)
  `CVE-2022-20552` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Android: In Multiple Locations, there is a possibility to launch arbitrary protected activities…](https://agentprime.io/advisories/CVE-2022-20550.md)
  `CVE-2022-20550` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-610
- [Out-of-bounds write in Android](https://agentprime.io/advisories/CVE-2022-20549.md)
  `CVE-2022-20549` · CVE record: Android · CVSS 6.7 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Out-of-bounds write in Android](https://agentprime.io/advisories/CVE-2022-20548.md)
  `CVE-2022-20548` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20547.md)
  `CVE-2022-20547` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [Out-of-bounds write in Android](https://agentprime.io/advisories/CVE-2022-20546.md)
  `CVE-2022-20546` · CVE record: Android · CVSS 6.7 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Improper input validation in Android](https://agentprime.io/advisories/CVE-2022-20545.md)
  `CVE-2022-20545` · CVE record: Android · CVSS 7.5 High · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-20
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20544.md)
  `CVE-2022-20544` · CVE record: Android · CVSS 4.4 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [In multiple locations, there is a possible display crash loop due to improper input validation.](https://agentprime.io/advisories/CVE-2022-20543.md)
  `CVE-2022-20543` · CVE record: Android · CVSS 2.3 Low · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-1284
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2022-20541.md)
  `CVE-2022-20541` · CVE record: Android · CVSS 4.2 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Use after free in Android](https://agentprime.io/advisories/CVE-2022-20540.md)
  `CVE-2022-20540` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Out-of-bounds write in Android](https://agentprime.io/advisories/CVE-2022-20539.md)
  `CVE-2022-20539` · CVE record: Android · CVSS 6.7 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Observable discrepancy in Android](https://agentprime.io/advisories/CVE-2022-20538.md)
  `CVE-2022-20538` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Information disclosure
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20537.md)
  `CVE-2022-20537` · CVE record: Android · CVSS 3.3 Low · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20536.md)
  `CVE-2022-20536` · CVE record: Android · CVSS 3.3 Low · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [Observable discrepancy in Android](https://agentprime.io/advisories/CVE-2022-20535.md)
  `CVE-2022-20535` · CVE record: Android · CVSS 3.3 Low · Not analysed yet · Published 16 Dec 2022 · Tags: Information disclosure
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20533.md)
  `CVE-2022-20533` · CVE record: Android · CVSS 3.3 Low · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [In strings.xml, there is a possible permission bypass due to a misleading string.](https://agentprime.io/advisories/CVE-2022-20530.md)
  `CVE-2022-20530` · CVE record: Android · CVSS 5.3 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-451
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20529.md)
  `CVE-2022-20529` · CVE record: Android · CVSS 2.4 Low · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2022-20528.md)
  `CVE-2022-20528` · CVE record: Android · CVSS 3.3 Low · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2022-20527.md)
  `CVE-2022-20527` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Out-of-bounds write in Android](https://agentprime.io/advisories/CVE-2022-20526.md)
  `CVE-2022-20526` · CVE record: Android · CVSS 3.3 Low · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Sensitive information in error messages in Android](https://agentprime.io/advisories/CVE-2022-20525.md)
  `CVE-2022-20525` · CVE record: Android · CVSS 3.3 Low · Not analysed yet · Published 16 Dec 2022 · Tags: Information disclosure
- [Use after free in Android](https://agentprime.io/advisories/CVE-2022-20524.md)
  `CVE-2022-20524` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2022-20523.md)
  `CVE-2022-20523` · CVE record: Android · CVSS 6.1 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20522.md)
  `CVE-2022-20522` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [NULL pointer dereference in Android](https://agentprime.io/advisories/CVE-2022-20521.md)
  `CVE-2022-20521` · CVE record: Android · CVSS 5.0 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [In onCreate of various files, there is a possible tapjacking/overlay attack.](https://agentprime.io/advisories/CVE-2022-20520.md)
  `CVE-2022-20520` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-102
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20519.md)
  `CVE-2022-20519` · CVE record: Android · CVSS 3.3 Low · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [SQL injection in Android](https://agentprime.io/advisories/CVE-2022-20518.md)
  `CVE-2022-20518` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: SQL injection
- [SQL injection in Android](https://agentprime.io/advisories/CVE-2022-20517.md)
  `CVE-2022-20517` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: SQL injection
- [Integer underflow in Android](https://agentprime.io/advisories/CVE-2022-20516.md)
  `CVE-2022-20516` · CVE record: Android · CVSS 7.5 High · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Android: In onPreferenceClick of AccountTypePreferenceLoader.java…](https://agentprime.io/advisories/CVE-2022-20515.md)
  `CVE-2022-20515` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-610
- [Use after free in Android](https://agentprime.io/advisories/CVE-2022-20514.md)
  `CVE-2022-20514` · CVE record: Android · CVSS 6.7 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2022-20513.md)
  `CVE-2022-20513` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Improper input validation in Android](https://agentprime.io/advisories/CVE-2022-20512.md)
  `CVE-2022-20512` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-20
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20511.md)
  `CVE-2022-20511` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20510.md)
  `CVE-2022-20510` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [Out-of-bounds write in Android](https://agentprime.io/advisories/CVE-2022-20509.md)
  `CVE-2022-20509` · CVE record: Android · CVSS 6.7 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20508.md)
  `CVE-2022-20508` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [Improper input validation in Android](https://agentprime.io/advisories/CVE-2022-20507.md)
  `CVE-2022-20507` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-20
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20506.md)
  `CVE-2022-20506` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [Path traversal in Android](https://agentprime.io/advisories/CVE-2022-20505.md)
  `CVE-2022-20505` · CVE record: Android · CVSS 6.7 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Path traversal
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20504.md)
  `CVE-2022-20504` · CVE record: Android · CVSS 6.7 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2022-20503.md)
  `CVE-2022-20503` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 16 Dec 2022 · Tags: Broken access control
- [Android: In multiple locations of NfcService.java…](https://agentprime.io/advisories/CVE-2022-20199.md)
  `CVE-2022-20199` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-610
- [Incorrect default permissions in Android](https://agentprime.io/advisories/CVE-2022-20611.md)
  `CVE-2022-20611` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 13 Dec 2022 · Tags: Broken access control
- [Use after free in Android](https://agentprime.io/advisories/CVE-2022-20502.md)
  `CVE-2022-20502` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 13 Dec 2022 · Tags: Memory corruption
- [Clickjacking in Android](https://agentprime.io/advisories/CVE-2022-20501.md)
  `CVE-2022-20501` · CVE record: Android · CVSS 7.3 High · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-1021
- [Improper handling of exceptional conditions in Android](https://agentprime.io/advisories/CVE-2022-20500.md)
  `CVE-2022-20500` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-755
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2022-20498.md)
  `CVE-2022-20498` · CVE record: Android · CVSS 4.4 Medium · Not analysed yet · Published 13 Dec 2022 · Tags: Memory corruption
- [Information disclosure in Android](https://agentprime.io/advisories/CVE-2022-20497.md)
  `CVE-2022-20497` · CVE record: Android · CVSS 4.6 Medium · Not analysed yet · Published 13 Dec 2022 · Tags: Information disclosure

Newest: <https://agentprime.io/advisories/technology/android.md>
Older: <https://agentprime.io/advisories/technology/android.md?cursor=WyIyMDIyLTEyLTEzVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi0yMDQ5NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=android&cursor=WyIyMDIyLTEyLTE2VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi0yMDU2MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/android/?cursor=WyIyMDIyLTEyLTE2VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi0yMDU2MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.