# Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2025-48609.md)
  `CVE-2025-48609` · CVE record: Google Android · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Mar 2026 · Tags: Denial of service
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-48605.md)
  `CVE-2025-48605` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-48602.md)
  `CVE-2025-48602` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-693
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2025-48587.md)
  `CVE-2025-48587` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-20
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2025-48585.md)
  `CVE-2025-48585` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-20
- [Symlink following in Google Android](https://agentprime.io/advisories/CVE-2025-48582.md)
  `CVE-2025-48582` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Path traversal
- [In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48579.md)
  `CVE-2025-48579` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-441
- [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2025-48578.md)
  `CVE-2025-48578` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Mar 2026 · Tags: Broken access control
- [Race condition in Google Android](https://agentprime.io/advisories/CVE-2025-48577.md)
  `CVE-2025-48577` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Race condition
- [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2025-48574.md)
  `CVE-2025-48574` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Broken access control
- [Race condition in Google Android](https://agentprime.io/advisories/CVE-2025-48568.md)
  `CVE-2025-48568` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Race condition
- [Path traversal in Google Android](https://agentprime.io/advisories/CVE-2025-48567.md)
  `CVE-2025-48567` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Mar 2026 · Tags: Path traversal
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2025-32313.md)
  `CVE-2025-32313` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Memory corruption
- [Cleartext transmission of sensitive information in Google Android](https://agentprime.io/advisories/CVE-2024-43766.md)
  `CVE-2024-43766` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Weak cryptography or TLS
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-0106.md)
  `CVE-2026-0106` · CVE record: Google Android · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Feb 2026 · Tags: Memory corruption
- [In key-based pairing, there is a possible ID due to a logic error in the code.](https://agentprime.io/advisories/CVE-2025-36911.md)
  `CVE-2025-36911` · CVE record: Google Android · CVSS 7.1 High · Not analysed yet · Published 15 Jan 2026
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-36938.md)
  `CVE-2025-36938` · CVE record: Google Android · CVSS 6.8 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: CWE-693
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2025-36937.md)
  `CVE-2025-36937` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2025-36936.md)
  `CVE-2025-36936` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Use of uninitialized variable in Google Android](https://agentprime.io/advisories/CVE-2025-36935.md)
  `CVE-2025-36935` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Race condition in Google Android](https://agentprime.io/advisories/CVE-2025-36934.md)
  `CVE-2025-36934` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 11 Dec 2025 · Tags: Race condition, Memory corruption
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2025-36932.md)
  `CVE-2025-36932` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Dec 2025 · Tags: CWE-20
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2025-36931.md)
  `CVE-2025-36931` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2025-36930.md)
  `CVE-2025-36930` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2025-36929.md)
  `CVE-2025-36929` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: CWE-20
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2025-36928.md)
  `CVE-2025-36928` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2025-36927.md)
  `CVE-2025-36927` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2025-36925.md)
  `CVE-2025-36925` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2025-36924.md)
  `CVE-2025-36924` · CVE record: Google Android · CVSS 8.0 High · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Heap-based buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2025-36923.md)
  `CVE-2025-36923` · CVE record: Google Android · CVSS 8.0 High · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Use after free in Google Android](https://agentprime.io/advisories/CVE-2025-36922.md)
  `CVE-2025-36922` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2025-36921.md)
  `CVE-2025-36921` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Double free in Google Android](https://agentprime.io/advisories/CVE-2025-36919.md)
  `CVE-2025-36919` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2025-36918.md)
  `CVE-2025-36918` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2025-36917.md)
  `CVE-2025-36917` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption
- [Race condition in Google Android](https://agentprime.io/advisories/CVE-2025-36916.md)
  `CVE-2025-36916` · CVE record: Google Android · CVSS 7.0 High · Not analysed yet · Published 11 Dec 2025 · Tags: Race condition
- [In cellular modem, there is a possible denial of service due to a logic error in the code.](https://agentprime.io/advisories/CVE-2025-36912.md)
  `CVE-2025-36912` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 11 Dec 2025
- [In onCreateTasks of CameraActivity.java, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-36889.md)
  `CVE-2025-36889` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: CWE-441
- [Race condition in Google Android](https://agentprime.io/advisories/CVE-2025-48625.md)
  `CVE-2025-48625` · CVE record: Google Android · CVSS 7.0 High · Not analysed yet · Published 8 Dec 2025 · Tags: Race condition
- [Missing authentication in Google Android](https://agentprime.io/advisories/CVE-2025-48608.md)
  `CVE-2025-48608` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: Authentication bypass
- [In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation without a mechanism to uninstall it due to a logic error in the code.](https://agentprime.io/advisories/CVE-2025-48606.md)
  `CVE-2025-48606` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025
- [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2025-48569.md)
  `CVE-2025-48569` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: Denial of service
- [Clickjacking in Google Android](https://agentprime.io/advisories/CVE-2025-48639.md)
  `CVE-2025-48639` · CVE record: Google Android · CVSS 7.3 High · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-1021
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2025-48638.md)
  `CVE-2025-48638` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: Memory corruption, CWE-20
- [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2025-48637.md)
  `CVE-2025-48637` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: Memory corruption
- [In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code.](https://agentprime.io/advisories/CVE-2025-48633.md)
  `CVE-2025-48633` · CVE record: Google Android · CVSS 5.5 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 8 Dec 2025
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2025-48632.md)
  `CVE-2025-48632` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-20
- [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2025-48631.md)
  `CVE-2025-48631` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: Denial of service
- [In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure default value.](https://agentprime.io/advisories/CVE-2025-48629.md)
  `CVE-2025-48629` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-1188
- [In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48628.md)
  `CVE-2025-48628` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-441
- [In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the background due to a logic error in the code.](https://agentprime.io/advisories/CVE-2025-48627.md)
  `CVE-2025-48627` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-48626.md)
  `CVE-2025-48626` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-693
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2025-48624.md)
  `CVE-2025-48624` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: Memory corruption, CWE-20
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2025-48623.md)
  `CVE-2025-48623` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: Memory corruption, CWE-20
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2025-48622.md)
  `CVE-2025-48622` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: Memory corruption
- [In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default.](https://agentprime.io/advisories/CVE-2025-48621.md)
  `CVE-2025-48621` · CVE record: Google Android · CVSS 7.3 High · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-1188
- [In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application's component name to persist even after uninstalling due to a logic error in the…](https://agentprime.io/advisories/CVE-2025-48620.md)
  `CVE-2025-48620` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025
- [In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking.](https://agentprime.io/advisories/CVE-2025-48618.md)
  `CVE-2025-48618` · CVE record: Google Android · CVSS 6.6 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-667
- [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2025-48615.md)
  `CVE-2025-48615` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: Denial of service
- [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2025-48614.md)
  `CVE-2025-48614` · CVE record: Google Android · CVSS 4.3 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: Broken access control

Newest: <https://agentprime.io/advisories/technology/google-android.md>
Older: <https://agentprime.io/advisories/technology/google-android.md?cursor=WyIyMDI1LTEyLTA4VDE2OjU3OjM0LjAwMTAwMFoiLCJDVkUtMjAyNS00ODYxNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=google-android&cursor=WyIyMDI2LTAzLTAyVDE4OjQyOjE1LjcwMjAwMFoiLCJDVkUtMjAyNS00ODYxMyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/google-android/?cursor=WyIyMDI2LTAzLTAyVDE4OjQyOjE1LjcwMjAwMFoiLCJDVkUtMjAyNS00ODYxMyJd>. Everything for agents: <https://agentprime.io/llms.txt>.