# Google Android. Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2024-25985.md) `CVE-2024-25985` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 11 Mar 2024 · Tags: Memory corruption - [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2024-25984.md) `CVE-2024-25984` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 11 Mar 2024 · Tags: Memory corruption - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-22011.md) `CVE-2024-22011` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 11 Mar 2024 · Tags: Memory corruption - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-22010.md) `CVE-2024-22010` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 11 Mar 2024 · Tags: Memory corruption - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2024-22009.md) `CVE-2024-22009` · CVE record: Google Android · CVSS 7.1 High · Not analysed yet · Published 11 Mar 2024 · Tags: Memory corruption - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-22008.md) `CVE-2024-22008` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2024 · Tags: Privilege escalation - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-22007.md) `CVE-2024-22007` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 11 Mar 2024 · Tags: Memory corruption - [OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.](https://agentprime.io/advisories/CVE-2024-22006.md) `CVE-2024-22006` · CVE record: Google Android · CVSS 5.3 Medium · Not analysed yet · Published 11 Mar 2024 - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2024-22005.md) `CVE-2024-22005` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 11 Mar 2024 · Tags: Memory corruption - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2024-23717.md) `CVE-2024-23717` · CVE record: Google Android · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Mar 2024 · Tags: CWE-20 - [In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy.](https://agentprime.io/advisories/CVE-2024-0053.md) `CVE-2024-0053` · CVE record: Google Android · CVSS 3.3 Low · Not analysed yet · Published 11 Mar 2024 · Tags: Information disclosure - [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2024-0052.md) `CVE-2024-0052` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 11 Mar 2024 · Tags: Broken access control - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2024-0051.md) `CVE-2024-0051` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2024 · Tags: Memory corruption - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2024-0050.md) `CVE-2024-0050` · CVE record: Google Android · CVSS 7.1 High · Not analysed yet · Published 11 Mar 2024 · Tags: Memory corruption - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-0049.md) `CVE-2024-0049` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2024 · Tags: Privilege escalation - [In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses.](https://agentprime.io/advisories/CVE-2024-0048.md) `CVE-2024-0048` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 11 Mar 2024 · Tags: CWE-230 - [Deserialization of untrusted data in Google Android](https://agentprime.io/advisories/CVE-2024-0047.md) `CVE-2024-0047` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 11 Mar 2024 · Tags: Insecure deserialization - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-0046.md) `CVE-2024-0046` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2024 · Tags: Privilege escalation - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2024-0045.md) `CVE-2024-0045` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 11 Mar 2024 · Tags: CWE-20 - [In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation.](https://agentprime.io/advisories/CVE-2024-0044.md) `CVE-2024-0044` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2024 · Tags: CWE-75 - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2024-0039.md) `CVE-2024-0039` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Mar 2024 · Tags: Memory corruption - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2024-0023.md) `CVE-2024-0023` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 16 Feb 2024 · Tags: Memory corruption - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2024-0021.md) `CVE-2024-0021` · CVE record: Google Android · CVSS 7.0 High · Not analysed yet · Published 16 Feb 2024 · Tags: CWE-20 - [Information disclosure in Google Android](https://agentprime.io/advisories/CVE-2024-0020.md) `CVE-2024-0020` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 16 Feb 2024 · Tags: Information disclosure - [Incorrect permission assignment in Google Android](https://agentprime.io/advisories/CVE-2024-0019.md) `CVE-2024-0019` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 16 Feb 2024 · Tags: Broken access control - [Heap-based buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2024-0018.md) `CVE-2024-0018` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 16 Feb 2024 · Tags: Memory corruption - [Incorrect authorization in Google Android](https://agentprime.io/advisories/CVE-2024-0017.md) `CVE-2024-0017` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 16 Feb 2024 · Tags: Broken access control - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-0016.md) `CVE-2024-0016` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 16 Feb 2024 · Tags: Memory corruption - [In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection.](https://agentprime.io/advisories/CVE-2024-0015.md) `CVE-2024-0015` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 16 Feb 2024 · Tags: CWE-280 - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2023-40085.md) `CVE-2023-40085` · CVE record: Google Android · CVSS 3.3 Low · Not analysed yet · Published 16 Feb 2024 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2023-21165.md) `CVE-2023-21165` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 16 Feb 2024 · Tags: Memory corruption - [Race condition in Google Android](https://agentprime.io/advisories/CVE-2024-0041.md) `CVE-2024-0041` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 16 Feb 2024 · Tags: Race condition - [Heap-based buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2024-0040.md) `CVE-2024-0040` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 16 Feb 2024 · Tags: Memory corruption - [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2024-0038.md) `CVE-2024-0038` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 16 Feb 2024 · Tags: Broken access control - [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2024-0037.md) `CVE-2024-0037` · CVE record: Google Android · CVSS 3.3 Low · Not analysed yet · Published 16 Feb 2024 · Tags: Broken access control, Information disclosure - [Improper access control in Google Android](https://agentprime.io/advisories/CVE-2024-0036.md) `CVE-2024-0036` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 16 Feb 2024 · Tags: Broken access control - [NULL pointer dereference in Google Android](https://agentprime.io/advisories/CVE-2024-0035.md) `CVE-2024-0035` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 16 Feb 2024 · Tags: Memory corruption - [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-0034.md) `CVE-2024-0034` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 16 Feb 2024 · Tags: Broken access control - [Heap-based buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2024-0033.md) `CVE-2024-0033` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 16 Feb 2024 · Tags: Memory corruption - [Improper access control in Google Android](https://agentprime.io/advisories/CVE-2024-0032.md) `CVE-2024-0032` · CVE record: Google Android · CVSS 6.8 Medium · Not analysed yet · Published 16 Feb 2024 · Tags: Broken access control - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2024-0031.md) `CVE-2024-0031` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Feb 2024 · Tags: CWE-20 - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-0030.md) `CVE-2024-0030` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 16 Feb 2024 · Tags: Memory corruption - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2024-0029.md) `CVE-2024-0029` · CVE record: Google Android · CVSS 7.1 High · Not analysed yet · Published 16 Feb 2024 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2024-0014.md) `CVE-2024-0014` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 16 Feb 2024 · Tags: CWE-693 - [In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy.](https://agentprime.io/advisories/CVE-2023-40122.md) `CVE-2023-40122` · CVE record: Google Android · CVSS 5.3 Medium · Not analysed yet · Published 16 Feb 2024 - [Insecure storage of sensitive information in Google Android](https://agentprime.io/advisories/CVE-2023-40093.md) `CVE-2023-40093` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 16 Feb 2024 · Tags: Information disclosure - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2023-40124.md) `CVE-2023-40124` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 15 Feb 2024 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2023-40115.md) `CVE-2023-40115` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Feb 2024 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2023-40114.md) `CVE-2023-40114` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 15 Feb 2024 · Tags: Memory corruption - [In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check.](https://agentprime.io/advisories/CVE-2023-40113.md) `CVE-2023-40113` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 15 Feb 2024 - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2023-40112.md) `CVE-2023-40112` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 15 Feb 2024 · Tags: Memory corruption - [In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of system_server due to a confused deputy.](https://agentprime.io/advisories/CVE-2023-40111.md) `CVE-2023-40111` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Feb 2024 · Tags: CWE-441 - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2023-40110.md) `CVE-2023-40110` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 15 Feb 2024 · Tags: Memory corruption - [In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions bypass.](https://agentprime.io/advisories/CVE-2023-40109.md) `CVE-2023-40109` · CVE record: Google Android · CVSS 7.3 High · Not analysed yet · Published 15 Feb 2024 · Tags: Privilege escalation - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2023-40107.md) `CVE-2023-40107` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 15 Feb 2024 · Tags: Memory corruption - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2023-40106.md) `CVE-2023-40106` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Feb 2024 · Tags: Privilege escalation - [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2023-40105.md) `CVE-2023-40105` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 15 Feb 2024 · Tags: Broken access control - [Improper certificate validation in Google Android](https://agentprime.io/advisories/CVE-2023-40104.md) `CVE-2023-40104` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 15 Feb 2024 · Tags: Weak cryptography or TLS - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2023-40100.md) `CVE-2023-40100` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 15 Feb 2024 · Tags: Memory corruption - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2024-22012.md) `CVE-2024-22012` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 7 Feb 2024 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .