# Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Path traversal in Google Android](https://agentprime.io/advisories/CVE-2026-49935.md)
  `CVE-2026-49935` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-49934.md)
  `CVE-2026-49934` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-20
- [In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-49931.md)
  `CVE-2026-49931` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-441
- [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2026-49924.md)
  `CVE-2026-49924` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Denial of service
- [In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in the code.](https://agentprime.io/advisories/CVE-2026-49923.md)
  `CVE-2026-49923` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-451
- [In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-49922.md)
  `CVE-2026-49922` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-441
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-49912.md)
  `CVE-2026-49912` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-45514.md)
  `CVE-2026-45514` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-28665.md)
  `CVE-2026-28665` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-20
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28645.md)
  `CVE-2026-28645` · CVE record: Google Android · CVSS 6.8 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-28643.md)
  `CVE-2026-28643` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-20
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28632.md)
  `CVE-2026-28632` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693
- [In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check.](https://agentprime.io/advisories/CVE-2026-28621.md)
  `CVE-2026-28621` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 2 Nov 2026
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-28597.md)
  `CVE-2026-28597` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-20
- [Improper access control in Google Android](https://agentprime.io/advisories/CVE-2026-28588.md)
  `CVE-2026-28588` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Broken access control
- [Improper access control in Google Android](https://agentprime.io/advisories/CVE-2026-0053.md)
  `CVE-2026-0053` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Broken access control
- [In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack.](https://agentprime.io/advisories/CVE-2025-26433.md)
  `CVE-2025-26433` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-451
- [In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay attack.](https://agentprime.io/advisories/CVE-2025-22436.md)
  `CVE-2025-22436` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-451
- [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2026-56952.md)
  `CVE-2026-56952` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-56936.md)
  `CVE-2026-56936` · CVE record: Google Android · CVSS 6.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Race condition in Google Android](https://agentprime.io/advisories/CVE-2026-56906.md)
  `CVE-2026-56906` · CVE record: Google Android · CVSS 7.0 High · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-55330.md)
  `CVE-2026-55330` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-55307.md)
  `CVE-2026-55307` · CVE record: Google Android · CVSS 4.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Privilege escalation
- [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2026-0198.md)
  `CVE-2026-0198` · CVE record: Google Android · CVSS 4.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [In Settings, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-28648.md)
  `CVE-2026-28648` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-441
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-28647.md)
  `CVE-2026-28647` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-28641.md)
  `CVE-2026-28641` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Privilege escalation
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-28640.md)
  `CVE-2026-28640` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-20
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-28625.md)
  `CVE-2026-28625` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Privilege escalation
- [Race condition in Google Android](https://agentprime.io/advisories/CVE-2026-58880.md)
  `CVE-2026-58880` · CVE record: Google Android · CVSS 7.0 High · Not analysed yet · Published 5 Oct 2026 · Tags: Race condition
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-58865.md)
  `CVE-2026-58865` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [In multiple places, there is a possible denial of service due to an uncaught exception.](https://agentprime.io/advisories/CVE-2026-58859.md)
  `CVE-2026-58859` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-248
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-58856.md)
  `CVE-2026-58856` · CVE record: Google Android · CVSS 3.3 Low · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [Type confusion in Google Android](https://agentprime.io/advisories/CVE-2026-58854.md)
  `CVE-2026-58854` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-58841.md)
  `CVE-2026-58841` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Privilege escalation
- [Heap-based buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-58835.md)
  `CVE-2026-58835` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-58834.md)
  `CVE-2026-58834` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-20
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-58815.md)
  `CVE-2026-58815` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-55286.md)
  `CVE-2026-55286` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [Use of uninitialized variable in Google Android](https://agentprime.io/advisories/CVE-2026-55280.md)
  `CVE-2026-55280` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-55270.md)
  `CVE-2026-55270` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-441
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-55269.md)
  `CVE-2026-55269` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-20
- [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2026-55266.md)
  `CVE-2026-55266` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-55265.md)
  `CVE-2026-55265` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-49937.md)
  `CVE-2026-49937` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [Uninitialized pointer access in Google Android](https://agentprime.io/advisories/CVE-2026-49933.md)
  `CVE-2026-49933` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-49885.md)
  `CVE-2026-49885` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-49880.md)
  `CVE-2026-49880` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-49878.md)
  `CVE-2026-49878` · CVE record: Google Android · CVSS 7.2 High · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2026-45524.md)
  `CVE-2026-45524` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Broken access control
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-28667.md)
  `CVE-2026-28667` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-58773.md)
  `CVE-2026-58773` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58767.md)
  `CVE-2026-58767` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58766.md)
  `CVE-2026-58766` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58765.md)
  `CVE-2026-58765` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58755.md)
  `CVE-2026-58755` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693
- [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-58751.md)
  `CVE-2026-58751` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58747.md)
  `CVE-2026-58747` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-58744.md)
  `CVE-2026-58744` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-20
- [In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-58739.md)
  `CVE-2026-58739` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-441

Newest: <https://agentprime.io/advisories/technology/google-android.md>
Older: <https://agentprime.io/advisories/technology/google-android.md?cursor=WyIyMDI2LTA5LTE1VDE4OjM0OjQ3LjgwMTAwMFoiLCJDVkUtMjAyNi01ODczOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=google-android&cursor=WyIyMDI2LTExLTAyVDE5OjUzOjIyLjAxMDAwMFoiLCJDVkUtMjAyNi01NTI1NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/google-android/?cursor=WyIyMDI2LTExLTAyVDE5OjUzOjIyLjAxMDAwMFoiLCJDVkUtMjAyNi01NTI1NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.