# Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [In the autofill service, the package name that is provided by the app process is trusted inappropriately.](https://agentprime.io/advisories/CVE-2017-13227.md)
  `CVE-2017-13227` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 14 Nov 2024
- [In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization.](https://agentprime.io/advisories/CVE-2024-43093.md)
  `CVE-2024-43093` · CVE record: Google Android · CVSS 7.3 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-176
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2024-43091.md)
  `CVE-2024-43091` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Nov 2024 · Tags: Memory corruption
- [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2024-43090.md)
  `CVE-2024-43090` · CVE record: Google Android · CVSS 5.0 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: Broken access control
- [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-43089.md)
  `CVE-2024-43089` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 13 Nov 2024 · Tags: Broken access control
- [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2024-43088.md)
  `CVE-2024-43088` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 13 Nov 2024 · Tags: Broken access control
- [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2024-43087.md)
  `CVE-2024-43087` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 13 Nov 2024 · Tags: Broken access control
- [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-43086.md)
  `CVE-2024-43086` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: Broken access control
- [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-43085.md)
  `CVE-2024-43085` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 13 Nov 2024 · Tags: Broken access control
- [Clickjacking in Google Android](https://agentprime.io/advisories/CVE-2024-43084.md)
  `CVE-2024-43084` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-1021
- [Resource allocation without limits in Google Android](https://agentprime.io/advisories/CVE-2024-43083.md)
  `CVE-2024-43083` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: Denial of service
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-43082.md)
  `CVE-2024-43082` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: Memory corruption
- [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-43081.md)
  `CVE-2024-43081` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 13 Nov 2024 · Tags: Broken access control
- [Deserialization of untrusted data in Google Android](https://agentprime.io/advisories/CVE-2024-43080.md)
  `CVE-2024-43080` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 13 Nov 2024 · Tags: Insecure deserialization
- [Code injection in Google Android](https://agentprime.io/advisories/CVE-2024-40671.md)
  `CVE-2024-40671` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 13 Nov 2024 · Tags: Code injection
- [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-40661.md)
  `CVE-2024-40661` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 13 Nov 2024 · Tags: Broken access control
- [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-40660.md)
  `CVE-2024-40660` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 13 Nov 2024 · Tags: Broken access control
- [Use after free in Google Android](https://agentprime.io/advisories/CVE-2024-34747.md)
  `CVE-2024-34747` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 13 Nov 2024 · Tags: Memory corruption
- [In multiple locations, there is a possible arbitrary code execution due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-34729.md)
  `CVE-2024-34729` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 13 Nov 2024
- [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2024-34719.md)
  `CVE-2024-34719` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 13 Nov 2024 · Tags: Broken access control
- [In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation.](https://agentprime.io/advisories/CVE-2024-31337.md)
  `CVE-2024-31337` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 13 Nov 2024
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2024-23715.md)
  `CVE-2024-23715` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 13 Nov 2024 · Tags: Memory corruption
- [In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation.](https://agentprime.io/advisories/CVE-2023-35686.md)
  `CVE-2023-35686` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 13 Nov 2024
- [In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code.](https://agentprime.io/advisories/CVE-2023-35659.md)
  `CVE-2023-35659` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 13 Nov 2024
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-47041.md)
  `CVE-2024-47041` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2024-47035.md)
  `CVE-2024-47035` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-47034.md)
  `CVE-2024-47034` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [Use after free in Google Android](https://agentprime.io/advisories/CVE-2024-47033.md)
  `CVE-2024-47033` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [Google Android: Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL…](https://agentprime.io/advisories/CVE-2024-47031.md)
  `CVE-2024-47031` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 25 Oct 2024
- [Google Android: Android before 2024-10-05 on Google Pixel devices allows information disclosure in the…](https://agentprime.io/advisories/CVE-2024-47030.md)
  `CVE-2024-47030` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 25 Oct 2024
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-47029.md)
  `CVE-2024-47029` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-47028.md)
  `CVE-2024-47028` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [Path traversal in Google Android](https://agentprime.io/advisories/CVE-2024-47027.md)
  `CVE-2024-47027` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 25 Oct 2024 · Tags: Path traversal
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-47026.md)
  `CVE-2024-47026` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [Incorrect authorization in Google Android](https://agentprime.io/advisories/CVE-2024-47025.md)
  `CVE-2024-47025` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 25 Oct 2024 · Tags: Broken access control
- [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2024-47024.md)
  `CVE-2024-47024` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [there is a possible man-in-the-middle attack due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-47023.md)
  `CVE-2024-47023` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 25 Oct 2024
- [Google Android: Android before 2024-10-05 on Google Pixel devices allows information disclosure in the…](https://agentprime.io/advisories/CVE-2024-47022.md)
  `CVE-2024-47022` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 25 Oct 2024
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-47021.md)
  `CVE-2024-47021` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [Google Android: Android before 2024-10-05 on Google Pixel devices allows information disclosure in the…](https://agentprime.io/advisories/CVE-2024-47020.md)
  `CVE-2024-47020` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 25 Oct 2024
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-47019.md)
  `CVE-2024-47019` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-47018.md)
  `CVE-2024-47018` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [Use after free in Google Android](https://agentprime.io/advisories/CVE-2024-47017.md)
  `CVE-2024-47017` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-47016.md)
  `CVE-2024-47016` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 25 Oct 2024 · Tags: Broken access control
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-47015.md)
  `CVE-2024-47015` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-47014.md)
  `CVE-2024-47014` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 25 Oct 2024 · Tags: Broken access control
- [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-47013.md)
  `CVE-2024-47013` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 25 Oct 2024 · Tags: Broken access control
- [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-47012.md)
  `CVE-2024-47012` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 25 Oct 2024 · Tags: Broken access control
- [NULL pointer dereference in Google Android](https://agentprime.io/advisories/CVE-2024-44101.md)
  `CVE-2024-44101` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2024-44100.md)
  `CVE-2024-44100` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 25 Oct 2024 · Tags: Broken access control
- [Incorrect authorization in Google Android](https://agentprime.io/advisories/CVE-2024-44099.md)
  `CVE-2024-44099` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 25 Oct 2024 · Tags: Broken access control
- [Double free in Google Android](https://agentprime.io/advisories/CVE-2024-44098.md)
  `CVE-2024-44098` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 25 Oct 2024 · Tags: Memory corruption
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-44097.md)
  `CVE-2024-44097` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2024 · Tags: Privilege escalation
- [there is a possible arbitrary read due to an insecure default value.](https://agentprime.io/advisories/CVE-2024-44096.md)
  `CVE-2024-44096` · CVE record: Google Android · CVSS 4.4 Medium · Not analysed yet · Published 13 Sept 2024
- [In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-44095.md)
  `CVE-2024-44095` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 13 Sept 2024
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2024-44094.md)
  `CVE-2024-44094` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 13 Sept 2024 · Tags: CWE-20
- [In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-44093.md)
  `CVE-2024-44093` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 13 Sept 2024 · Tags: CWE-783
- [Active debug code in Google Android](https://agentprime.io/advisories/CVE-2024-44092.md)
  `CVE-2024-44092` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 13 Sept 2024 · Tags: CWE-489
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-29779.md)
  `CVE-2024-29779` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 13 Sept 2024 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-40662.md)
  `CVE-2024-40662` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2024 · Tags: Privilege escalation

Newest: <https://agentprime.io/advisories/technology/google-android.md>
Older: <https://agentprime.io/advisories/technology/google-android.md?cursor=WyIyMDI0LTA5LTExVDAwOjA5OjE5Ljc2MDAwMFoiLCJDVkUtMjAyNC00MDY2MiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=google-android&cursor=WyIyMDI0LTExLTE1VDIwOjUyOjEzLjM5ODAwMFoiLCJDVkUtMjAxNy0xMzMwOSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/google-android/?cursor=WyIyMDI0LTExLTE1VDIwOjUyOjEzLjM5ODAwMFoiLCJDVkUtMjAxNy0xMzMwOSJd>. Everything for agents: <https://agentprime.io/llms.txt>.
