# Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [An oversight in BCB handling of reboot reason that allows for persistent code execution](https://agentprime.io/advisories/CVE-2023-6181.md)
  `CVE-2023-6181` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 11 Dec 2023
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2023-48425.md)
  `CVE-2023-48425` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Dec 2023 · Tags: CWE-20
- [U-Boot shell vulnerability resulting in Privilege escalation in a production device](https://agentprime.io/advisories/CVE-2023-48424.md)
  `CVE-2023-48424` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Dec 2023
- [Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application](https://agentprime.io/advisories/CVE-2023-48417.md)
  `CVE-2023-48417` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 11 Dec 2023
- [In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-48423.md)
  `CVE-2023-48423` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-48422.md)
  `CVE-2023-48422` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2023-48421.md)
  `CVE-2023-48421` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2023 · Tags: Memory corruption
- [there is a possible use after free due to a race condition.](https://agentprime.io/advisories/CVE-2023-48420.md)
  `CVE-2023-48420` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In multiple locations, there is a possible null dereference due to a missing null check.](https://agentprime.io/advisories/CVE-2023-48416.md)
  `CVE-2023-48416` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In Init of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-48415.md)
  `CVE-2023-48415` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code.](https://agentprime.io/advisories/CVE-2023-48414.md)
  `CVE-2023-48414` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-48413.md)
  `CVE-2023-48413` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In private_handle_t of mali_gralloc_buffer.h, there is a possible information leak due to a logic error in the code.](https://agentprime.io/advisories/CVE-2023-48412.md)
  `CVE-2023-48412` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In SignalStrengthAdapter::FillGsmSignalStrength() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-48411.md)
  `CVE-2023-48411` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-48410.md)
  `CVE-2023-48410` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there is a possible out of bounds write due to an integer overflow.](https://agentprime.io/advisories/CVE-2023-48409.md)
  `CVE-2023-48409` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In ProtocolNetSimFileInfoAdapter() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-48408.md)
  `CVE-2023-48408` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [there is a possible DCK won't be deleted after factory reset due to a logic error in the code.](https://agentprime.io/advisories/CVE-2023-48407.md)
  `CVE-2023-48407` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2023-48406.md)
  `CVE-2023-48406` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023 · Tags: Privilege escalation
- [there is a possible way for the secure world to write to NS memory due to a logic error in the code.](https://agentprime.io/advisories/CVE-2023-48405.md)
  `CVE-2023-48405` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-48404.md)
  `CVE-2023-48404` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In sms_DecodeCodedTpMsg of sms_PduCodec.c, there is a possible out of bounds read due to a heap buffer overflow.](https://agentprime.io/advisories/CVE-2023-48403.md)
  `CVE-2023-48403` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In ppcfw_enable of ppcfw.c, there is a possible EoP due to a missing permission check.](https://agentprime.io/advisories/CVE-2023-48402.md)
  `CVE-2023-48402` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In GetSizeOfEenlRecords of protocoladapter.cpp, there is a possible out of bounds read due to an incorrect bounds check.](https://agentprime.io/advisories/CVE-2023-48401.md)
  `CVE-2023-48401` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In ProtocolMiscATCommandAdapter::Init() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-48399.md)
  `CVE-2023-48399` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2023-48398.md)
  `CVE-2023-48398` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 8 Dec 2023 · Tags: Memory corruption
- [In Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-48397.md)
  `CVE-2023-48397` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-45781.md)
  `CVE-2023-45781` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto.](https://agentprime.io/advisories/CVE-2023-45779.md)
  `CVE-2023-45779` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privileges due to Parcel Mismatch.](https://agentprime.io/advisories/CVE-2023-45777.md)
  `CVE-2023-45777` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-45776.md)
  `CVE-2023-45776` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-45775.md)
  `CVE-2023-45775` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user's image due to a confused deputy.](https://agentprime.io/advisories/CVE-2023-45774.md)
  `CVE-2023-45774` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-45773.md)
  `CVE-2023-45773` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In multiple locations, there is a possible way to corrupt memory due to a double free.](https://agentprime.io/advisories/CVE-2023-40103.md)
  `CVE-2023-40103` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code.](https://agentprime.io/advisories/CVE-2023-40098.md)
  `CVE-2023-40098` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation.](https://agentprime.io/advisories/CVE-2023-40097.md)
  `CVE-2023-40097` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing flag.](https://agentprime.io/advisories/CVE-2023-40096.md)
  `CVE-2023-40096` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check.](https://agentprime.io/advisories/CVE-2023-40095.md)
  `CVE-2023-40095` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check.](https://agentprime.io/advisories/CVE-2023-40094.md)
  `CVE-2023-40094` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confused deputy.](https://agentprime.io/advisories/CVE-2023-40092.md)
  `CVE-2023-40092` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption.](https://agentprime.io/advisories/CVE-2023-40091.md)
  `CVE-2023-40091` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure.](https://agentprime.io/advisories/CVE-2023-40090.md)
  `CVE-2023-40090` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to a missing permission check.](https://agentprime.io/advisories/CVE-2023-40089.md)
  `CVE-2023-40089` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [Use after free in Google Android](https://agentprime.io/advisories/CVE-2023-40088.md)
  `CVE-2023-40088` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 4 Dec 2023 · Tags: Memory corruption
- [In transcodeQ\*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-40087.md)
  `CVE-2023-40087` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free.](https://agentprime.io/advisories/CVE-2023-40084.md)
  `CVE-2023-40084` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-40083.md)
  `CVE-2023-40083` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto.](https://agentprime.io/advisories/CVE-2023-40082.md)
  `CVE-2023-40082` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to a confused deputy.](https://agentprime.io/advisories/CVE-2023-40081.md)
  `CVE-2023-40081` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code.](https://agentprime.io/advisories/CVE-2023-40080.md)
  `CVE-2023-40080` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass.](https://agentprime.io/advisories/CVE-2023-40079.md)
  `CVE-2023-40079` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow.](https://agentprime.io/advisories/CVE-2023-40078.md)
  `CVE-2023-40078` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [Race condition in Google Android](https://agentprime.io/advisories/CVE-2023-40077.md)
  `CVE-2023-40077` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Dec 2023 · Tags: Race condition
- [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2023-40076.md)
  `CVE-2023-40076` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 4 Dec 2023 · Tags: Broken access control
- [In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-40075.md)
  `CVE-2023-40075` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privileges needed.](https://agentprime.io/advisories/CVE-2023-40074.md)
  `CVE-2023-40074` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy.](https://agentprime.io/advisories/CVE-2023-40073.md)
  `CVE-2023-40073` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception.](https://agentprime.io/advisories/CVE-2023-35690.md)
  `CVE-2023-35690` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy.](https://agentprime.io/advisories/CVE-2023-35668.md)
  `CVE-2023-35668` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023

Newest: <https://agentprime.io/advisories/technology/google-android.md>
Older: <https://agentprime.io/advisories/technology/google-android.md?cursor=WyIyMDIzLTEyLTA0VDIyOjQwOjQ5Ljc1MDAwMFoiLCJDVkUtMjAyMy0zNTY2OCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=google-android&cursor=WyIyMDI0LTAyLTA3VDE1OjQ5OjE4LjM1OTAwMFoiLCJDVkUtMjAyNC0yMjAxMiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/google-android/?cursor=WyIyMDI0LTAyLTA3VDE1OjQ5OjE4LjM1OTAwMFoiLCJDVkUtMjAyNC0yMjAxMiJd>. Everything for agents: <https://agentprime.io/llms.txt>.