# Google Android. Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2024-40659.md) `CVE-2024-40659` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 11 Sept 2024 · Tags: Memory corruption - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-40658.md) `CVE-2024-40658` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2024 · Tags: Privilege escalation - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-40657.md) `CVE-2024-40657` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2024 · Tags: Privilege escalation - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-40656.md) `CVE-2024-40656` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 11 Sept 2024 · Tags: Memory corruption - [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-40655.md) `CVE-2024-40655` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2024 · Tags: Broken access control - [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-40654.md) `CVE-2024-40654` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2024 · Tags: Broken access control - [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2024-40652.md) `CVE-2024-40652` · CVE record: Google Android · CVSS 7.3 High · Not analysed yet · Published 11 Sept 2024 · Tags: Broken access control - [In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state.](https://agentprime.io/advisories/CVE-2024-40650.md) `CVE-2024-40650` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2024 · Tags: CWE-358 - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2024-31336.md) `CVE-2024-31336` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2024 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2024-23716.md) `CVE-2024-23716` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 11 Sept 2024 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2024-32927.md) `CVE-2024-32927` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 19 Aug 2024 · Tags: Memory corruption - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-34743.md) `CVE-2024-34743` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Aug 2024 · Tags: Privilege escalation - [Type confusion in Google Android](https://agentprime.io/advisories/CVE-2024-34742.md) `CVE-2024-34742` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 15 Aug 2024 · Tags: Memory corruption - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-34741.md) `CVE-2024-34741` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Aug 2024 · Tags: Privilege escalation, CWE-783 - [XML injection in Google Android](https://agentprime.io/advisories/CVE-2024-34740.md) `CVE-2024-34740` · CVE record: Google Android · CVSS 7.7 High · Not analysed yet · Published 15 Aug 2024 · Tags: Other injection, Memory corruption - [Improper output encoding in Google Android](https://agentprime.io/advisories/CVE-2024-34739.md) `CVE-2024-34739` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Aug 2024 · Tags: CWE-116 - [In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own restrictRead app-op states due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-34738.md) `CVE-2024-34738` · CVE record: Google Android · CVSS 7.7 High · Not analysed yet · Published 15 Aug 2024 · Tags: Privilege escalation - [In ensureSetPipAspectRatioQuotaTracker of ActivityClientController.java, there is a possible way to generate unmovable and undeletable pip windows due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-34737.md) `CVE-2024-34737` · CVE record: Google Android · CVSS 7.7 High · Not analysed yet · Published 15 Aug 2024 - [In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled.](https://agentprime.io/advisories/CVE-2024-34736.md) `CVE-2024-34736` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 15 Aug 2024 - [In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app from the lockscreen due to an insecure default value.](https://agentprime.io/advisories/CVE-2024-34734.md) `CVE-2024-34734` · CVE record: Google Android · CVSS 7.7 High · Not analysed yet · Published 15 Aug 2024 · Tags: CWE-1188 - [In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition.](https://agentprime.io/advisories/CVE-2024-34731.md) `CVE-2024-34731` · CVE record: Google Android · CVSS 7.7 High · Not analysed yet · Published 15 Aug 2024 · Tags: CWE-368 - [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2024-34727.md) `CVE-2024-34727` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 15 Aug 2024 · Tags: Memory corruption - [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2024-31333.md) `CVE-2024-31333` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Aug 2024 · Tags: Memory corruption - [In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-34726.md) `CVE-2024-34726` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-783 - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-34725.md) `CVE-2024-34725` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 9 Jul 2024 · Tags: Privilege escalation, Broken access control - [Race condition in Google Android](https://agentprime.io/advisories/CVE-2024-34724.md) `CVE-2024-34724` · CVE record: Google Android · CVSS 7.0 High · Not analysed yet · Published 9 Jul 2024 · Tags: Race condition - [In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-34723.md) `CVE-2024-34723` · CVE record: Google Android · CVSS 5.3 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-783 - [In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol.](https://agentprime.io/advisories/CVE-2024-34722.md) `CVE-2024-34722` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 9 Jul 2024 · Tags: Authentication bypass - [Insecure storage of sensitive information in Google Android](https://agentprime.io/advisories/CVE-2024-34721.md) `CVE-2024-34721` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: Information disclosure - [Google Android: In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of…](https://agentprime.io/advisories/CVE-2024-34720.md) `CVE-2024-34720` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-783 - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2024-31339.md) `CVE-2024-31339` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption - [In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-31335.md) `CVE-2024-31335` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-783 - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-31334.md) `CVE-2024-31334` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: Privilege escalation - [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2024-31332.md) `CVE-2024-31332` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 9 Jul 2024 · Tags: Broken access control - [In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-31331.md) `CVE-2024-31331` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-783 - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-31320.md) `CVE-2024-31320` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 9 Jul 2024 · Tags: Privilege escalation, Broken access control - [Race condition in Google Android](https://agentprime.io/advisories/CVE-2024-31327.md) `CVE-2024-31327` · CVE record: Google Android · CVSS 5.3 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: Race condition - [In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-31326.md) `CVE-2024-31326` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-783 - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-31325.md) `CVE-2024-31325` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Privilege escalation - [Clickjacking in Google Android](https://agentprime.io/advisories/CVE-2024-31324.md) `CVE-2024-31324` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-1021 - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-31323.md) `CVE-2024-31323` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Privilege escalation - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-31322.md) `CVE-2024-31322` · CVE record: Google Android · CVSS 6.3 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: Privilege escalation - [In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user data leak due to a confused deputy.](https://agentprime.io/advisories/CVE-2024-31319.md) `CVE-2024-31319` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-441 - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-31318.md) `CVE-2024-31318` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Privilege escalation - [Deserialization of untrusted data in Google Android](https://agentprime.io/advisories/CVE-2024-31317.md) `CVE-2024-31317` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Insecure deserialization - [In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch.](https://agentprime.io/advisories/CVE-2024-31316.md) `CVE-2024-31316` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 - [In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the Device & app notifications settings due to improper input validation.](https://agentprime.io/advisories/CVE-2024-31315.md) `CVE-2024-31315` · CVE record: Google Android · CVSS 5.3 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: Privilege escalation - [Resource allocation without limits in Google Android](https://agentprime.io/advisories/CVE-2024-31314.md) `CVE-2024-31314` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: Denial of service - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-31313.md) `CVE-2024-31313` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Privilege escalation - [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-31312.md) `CVE-2024-31312` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: Broken access control - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-31311.md) `CVE-2024-31311` · CVE record: Google Android · CVSS 6.3 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: Privilege escalation - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2024-31310.md) `CVE-2024-31310` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-20 - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-23711.md) `CVE-2024-23711` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Privilege escalation - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2024-23698.md) `CVE-2024-23698` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2024-23697.md) `CVE-2024-23697` · CVE record: Google Android · CVSS 7.3 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2024-23696.md) `CVE-2024-23696` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption - [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2024-23695.md) `CVE-2024-23695` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2023-21114.md) `CVE-2023-21114` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Privilege escalation - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2023-21113.md) `CVE-2023-21113` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Privilege escalation - [In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to uninitialized data.](https://agentprime.io/advisories/CVE-2024-32930.md) `CVE-2024-32930` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 13 Jun 2024 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .