# Android.

Every CVE that names Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-21159.md)
  `CVE-2023-21159` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow.](https://agentprime.io/advisories/CVE-2023-21158.md)
  `CVE-2023-21158` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow.](https://agentprime.io/advisories/CVE-2023-21157.md)
  `CVE-2023-21157` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In BuildGetRadioNode of protocolmiscbulider.cpp…](https://agentprime.io/advisories/CVE-2023-21156.md)
  `CVE-2023-21156` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In BuildSetRadioNode of protocolmiscbuilder.cpp…](https://agentprime.io/advisories/CVE-2023-21155.md)
  `CVE-2023-21155` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In StoreAdbSerialNumber of protocolmiscbuilder.cpp…](https://agentprime.io/advisories/CVE-2023-21154.md)
  `CVE-2023-21154` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In Do_AIMS_SET_CALL_WAITING of imsservice.cpp…](https://agentprime.io/advisories/CVE-2023-21153.md)
  `CVE-2023-21153` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In FaceStatsAnalyzer::InterpolateWeightList of face_stats_analyzer.cc…](https://agentprime.io/advisories/CVE-2023-21152.md)
  `CVE-2023-21152` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In the Google BMS kernel module, there is a possible out of bounds write due to a heap…](https://agentprime.io/advisories/CVE-2023-21151.md)
  `CVE-2023-21151` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In handle_set_parameters_ctrl of hal_socket.c…](https://agentprime.io/advisories/CVE-2023-21150.md)
  `CVE-2023-21150` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In registerGsmaServiceIntentReceiver of ShannonRcsService.java…](https://agentprime.io/advisories/CVE-2023-21149.md)
  `CVE-2023-21149` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In BuildSetConfig of protocolimsbuilder.cpp…](https://agentprime.io/advisories/CVE-2023-21148.md)
  `CVE-2023-21148` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In lwis_i2c_device_disable of lwis_device_i2c.c…](https://agentprime.io/advisories/CVE-2023-21147.md)
  `CVE-2023-21147` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [there is a possible way to corrupt memory due to a use after free.](https://agentprime.io/advisories/CVE-2023-21146.md)
  `CVE-2023-21146` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow.](https://agentprime.io/advisories/CVE-2023-21066.md)
  `CVE-2023-21066` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Android: In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements…](https://agentprime.io/advisories/CVE-2022-20443.md)
  `CVE-2022-20443` · CVE record: Android · No CVSS score · Not analysed yet · Published 28 Jun 2023
- [Resource allocation without limits in Android](https://agentprime.io/advisories/CVE-2023-21144.md)
  `CVE-2023-21144` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Denial of service
- [Buffer overflow in Android](https://agentprime.io/advisories/CVE-2023-21143.md)
  `CVE-2023-21143` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Memory corruption
- [Incorrect permission assignment in Android](https://agentprime.io/advisories/CVE-2023-21142.md)
  `CVE-2023-21142` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Broken access control
- [Missing authorization in Android](https://agentprime.io/advisories/CVE-2023-21141.md)
  `CVE-2023-21141` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Broken access control
- [Incorrect default permissions in Android](https://agentprime.io/advisories/CVE-2023-21139.md)
  `CVE-2023-21139` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Broken access control
- [Incorrect default permissions in Android](https://agentprime.io/advisories/CVE-2023-21138.md)
  `CVE-2023-21138` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Broken access control
- [Android: In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to…](https://agentprime.io/advisories/CVE-2023-21137.md)
  `CVE-2023-21137` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023
- [Buffer overflow in Android](https://agentprime.io/advisories/CVE-2023-21136.md)
  `CVE-2023-21136` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Memory corruption
- [Buffer overflow in Android](https://agentprime.io/advisories/CVE-2023-21135.md)
  `CVE-2023-21135` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Memory corruption
- [Insecure direct object reference in Android](https://agentprime.io/advisories/CVE-2023-21131.md)
  `CVE-2023-21131` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Broken access control
- [Android: In btm_ble_periodic_adv_sync_lost of btm_ble_gap.cc…](https://agentprime.io/advisories/CVE-2023-21130.md)
  `CVE-2023-21130` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023
- [Incorrect default permissions in Android](https://agentprime.io/advisories/CVE-2023-21129.md)
  `CVE-2023-21129` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Broken access control
- [Incorrect default permissions in Android](https://agentprime.io/advisories/CVE-2023-21128.md)
  `CVE-2023-21128` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Broken access control
- [Android: In readSampleData of NuMediaExtractor.cpp…](https://agentprime.io/advisories/CVE-2023-21127.md)
  `CVE-2023-21127` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023
- [Incorrect default permissions in Android](https://agentprime.io/advisories/CVE-2023-21126.md)
  `CVE-2023-21126` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Broken access control
- [In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization.](https://agentprime.io/advisories/CVE-2023-21124.md)
  `CVE-2023-21124` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023
- [Android: In multiple functions of multiple files…](https://agentprime.io/advisories/CVE-2023-21123.md)
  `CVE-2023-21123` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023
- [Android: In various functions of various files…](https://agentprime.io/advisories/CVE-2023-21122.md)
  `CVE-2023-21122` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023
- [Incorrect default permissions in Android](https://agentprime.io/advisories/CVE-2023-21121.md)
  `CVE-2023-21121` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Broken access control
- [In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking.](https://agentprime.io/advisories/CVE-2023-21120.md)
  `CVE-2023-21120` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023
- [Android: In btm_sec_encrypt_change of btm_sec.cc…](https://agentprime.io/advisories/CVE-2023-21115.md)
  `CVE-2023-21115` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023
- [Android: In sdpu_build_uuid_seq of sdp_discovery.cc…](https://agentprime.io/advisories/CVE-2023-21108.md)
  `CVE-2023-21108` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023
- [Server-side request forgery in Android](https://agentprime.io/advisories/CVE-2023-21105.md)
  `CVE-2023-21105` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Server-side request forgery (SSRF)
- [Android: In multiple functions of WVDrmPlugin.cpp…](https://agentprime.io/advisories/CVE-2023-21101.md)
  `CVE-2023-21101` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023
- [Android: In canStartSystemGesture of RecentsAnimationDeviceState.java…](https://agentprime.io/advisories/CVE-2023-21095.md)
  `CVE-2023-21095` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023
- [Out-of-bounds write in Android](https://agentprime.io/advisories/CVE-2021-0945.md)
  `CVE-2021-0945` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Memory corruption
- [Integer overflow in Android](https://agentprime.io/advisories/CVE-2021-0701.md)
  `CVE-2021-0701` · CVE record: Android · No CVSS score · Not analysed yet · Published 15 Jun 2023 · Tags: Memory corruption
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2023-21118.md)
  `CVE-2023-21118` · CVE record: Android · CVSS 6.2 Medium · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [Incorrect authorization in Android](https://agentprime.io/advisories/CVE-2023-21117.md)
  `CVE-2023-21117` · CVE record: Android · CVSS 8.4 High · Not analysed yet · Published 15 May 2023 · Tags: Broken access control
- [Incorrect authorization in Android](https://agentprime.io/advisories/CVE-2023-21116.md)
  `CVE-2023-21116` · CVE record: Android · CVSS 6.7 Medium · Not analysed yet · Published 15 May 2023 · Tags: Broken access control
- [Out-of-bounds read in Android](https://agentprime.io/advisories/CVE-2023-21112.md)
  `CVE-2023-21112` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [Android: In several functions of PhoneAccountRegistrar.java…](https://agentprime.io/advisories/CVE-2023-21111.md)
  `CVE-2023-21111` · CVE record: Android · CVSS 6.2 Medium · Not analysed yet · Published 15 May 2023 · Tags: CWE-1284
- [Resource allocation without limits in Android](https://agentprime.io/advisories/CVE-2023-21110.md)
  `CVE-2023-21110` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 15 May 2023 · Tags: Denial of service
- [Weak encryption in Android](https://agentprime.io/advisories/CVE-2023-21109.md)
  `CVE-2023-21109` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 15 May 2023 · Tags: Weak cryptography or TLS
- [Incorrect default permissions in Android](https://agentprime.io/advisories/CVE-2023-21107.md)
  `CVE-2023-21107` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 15 May 2023 · Tags: Broken access control
- [Double free in Android](https://agentprime.io/advisories/CVE-2023-21106.md)
  `CVE-2023-21106` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [Incorrect default permissions in Android](https://agentprime.io/advisories/CVE-2023-21104.md)
  `CVE-2023-21104` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 15 May 2023 · Tags: Broken access control
- [Sensitive information in error messages in Android](https://agentprime.io/advisories/CVE-2023-21103.md)
  `CVE-2023-21103` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 15 May 2023 · Tags: Information disclosure
- [Improper check for unusual conditions in Android](https://agentprime.io/advisories/CVE-2023-21102.md)
  `CVE-2023-21102` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 15 May 2023 · Tags: CWE-754
- [Resource allocation without limits in Android](https://agentprime.io/advisories/CVE-2023-20930.md)
  `CVE-2023-20930` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 15 May 2023 · Tags: Denial of service
- [Cleartext storage of sensitive information in Android](https://agentprime.io/advisories/CVE-2023-20914.md)
  `CVE-2023-20914` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 15 May 2023 · Tags: Information disclosure
- [Product: AndroidVersions: Android SoCAndroid ID: A-273754094](https://agentprime.io/advisories/CVE-2021-0877.md)
  `CVE-2021-0877` · CVE record: Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 May 2023
- [Out-of-bounds write in Android](https://agentprime.io/advisories/CVE-2023-21100.md)
  `CVE-2023-21100` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 19 Apr 2023 · Tags: Memory corruption
- [Android: In multiple methods of PackageInstallerSession.java…](https://agentprime.io/advisories/CVE-2023-21099.md)
  `CVE-2023-21099` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 19 Apr 2023

Newest: <https://agentprime.io/advisories/technology/android.md>
Older: <https://agentprime.io/advisories/technology/android.md?cursor=WyIyMDIzLTA0LTE5VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy0yMTA5OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=android&cursor=WyIyMDIzLTA2LTI4VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy0yMTE2MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/android/?cursor=WyIyMDIzLTA2LTI4VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy0yMTE2MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.