# Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception.](https://agentprime.io/advisories/CVE-2023-21403.md)
  `CVE-2023-21403` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation.](https://agentprime.io/advisories/CVE-2023-21402.md)
  `CVE-2023-21402` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow.](https://agentprime.io/advisories/CVE-2023-21401.md)
  `CVE-2023-21401` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception.](https://agentprime.io/advisories/CVE-2023-21263.md)
  `CVE-2023-21263` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check.](https://agentprime.io/advisories/CVE-2023-21228.md)
  `CVE-2023-21228` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure.](https://agentprime.io/advisories/CVE-2023-21227.md)
  `CVE-2023-21227` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check.](https://agentprime.io/advisories/CVE-2023-21218.md)
  `CVE-2023-21218` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow.](https://agentprime.io/advisories/CVE-2023-21217.md)
  `CVE-2023-21217` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [Incorrect default permissions in Google Android](https://agentprime.io/advisories/CVE-2023-21216.md)
  `CVE-2023-21216` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Dec 2023 · Tags: Broken access control
- [In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition.](https://agentprime.io/advisories/CVE-2023-21215.md)
  `CVE-2023-21215` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free.](https://agentprime.io/advisories/CVE-2023-21166.md)
  `CVE-2023-21166` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Dec 2023
- [In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free.](https://agentprime.io/advisories/CVE-2023-21164.md)
  `CVE-2023-21164` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free.](https://agentprime.io/advisories/CVE-2023-21163.md)
  `CVE-2023-21163` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free.](https://agentprime.io/advisories/CVE-2023-21162.md)
  `CVE-2023-21162` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 4 Dec 2023
- [Code injection in Google Android](https://agentprime.io/advisories/CVE-2022-42541.md)
  `CVE-2022-42541` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Nov 2023 · Tags: Code injection
- [Elevation of privilege](https://agentprime.io/advisories/CVE-2022-42540.md)
  `CVE-2022-42540` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 29 Nov 2023
- [Information disclosure](https://agentprime.io/advisories/CVE-2022-42539.md)
  `CVE-2022-42539` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 29 Nov 2023
- [Elevation of privilege](https://agentprime.io/advisories/CVE-2022-42538.md)
  `CVE-2022-42538` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 29 Nov 2023
- [Remote code execution](https://agentprime.io/advisories/CVE-2022-42537.md)
  `CVE-2022-42537` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 29 Nov 2023
- [Remote code execution](https://agentprime.io/advisories/CVE-2022-42536.md)
  `CVE-2022-42536` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 29 Nov 2023
- [In Print Service, there is a possible background activity launch due to a logic error in the code.](https://agentprime.io/advisories/CVE-2023-45780.md)
  `CVE-2023-45780` · CVE record: Google Android · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2023
- [In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-40101.md)
  `CVE-2023-40101` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In sdksandbox, there is a possible strandhogg style overlay attack due to a logic error in the code.](https://agentprime.io/advisories/CVE-2023-21398.md)
  `CVE-2023-21398` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2023-21397.md)
  `CVE-2023-21397` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2023-21396.md)
  `CVE-2023-21396` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023 · Tags: Privilege escalation
- [In Bluetooth, there is a possible out of bounds read due to a use after free.](https://agentprime.io/advisories/CVE-2023-21395.md)
  `CVE-2023-21395` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In registerPhoneAccount of TelecomServiceImpl.java, there is a possible way to reveal images from another user due to a missing permission check.](https://agentprime.io/advisories/CVE-2023-21394.md)
  `CVE-2023-21394` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Settings, there is a possible way for the user to change SIM due to a missing permission check.](https://agentprime.io/advisories/CVE-2023-21393.md)
  `CVE-2023-21393` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Bluetooth, there is a possible way to corrupt memory due to a use after free.](https://agentprime.io/advisories/CVE-2023-21392.md)
  `CVE-2023-21392` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Messaging, there is a possible way to disable the messaging application due to improper input validation.](https://agentprime.io/advisories/CVE-2023-21391.md)
  `CVE-2023-21391` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [Incorrect authorization in Google Android](https://agentprime.io/advisories/CVE-2023-21390.md)
  `CVE-2023-21390` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 30 Oct 2023 · Tags: Broken access control
- [In Settings, there is a possible bypass of profile owner restrictions due to a missing permission check.](https://agentprime.io/advisories/CVE-2023-21389.md)
  `CVE-2023-21389` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Settings, there is a possible restriction bypass due to a missing permission check.](https://agentprime.io/advisories/CVE-2023-21388.md)
  `CVE-2023-21388` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log information disclosure.](https://agentprime.io/advisories/CVE-2023-21387.md)
  `CVE-2023-21387` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Whitechapel, there is a possible out of bounds read due to memory corruption.](https://agentprime.io/advisories/CVE-2023-21385.md)
  `CVE-2023-21385` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Package Manager, there is a possible possible permissions bypass due to an unsafe PendingIntent.](https://agentprime.io/advisories/CVE-2023-21384.md)
  `CVE-2023-21384` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Settings, there is a possible way for the user to unintentionally send extra data due to an unclear prompt.](https://agentprime.io/advisories/CVE-2023-21383.md)
  `CVE-2023-21383` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check.](https://agentprime.io/advisories/CVE-2023-21382.md)
  `CVE-2023-21382` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Media Resource Manager, there is a possible local arbitrary code execution due to use after free.](https://agentprime.io/advisories/CVE-2023-21381.md)
  `CVE-2023-21381` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow.](https://agentprime.io/advisories/CVE-2023-21380.md)
  `CVE-2023-21380` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Bluetooth, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-21379.md)
  `CVE-2023-21379` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Telecomm, there is a possible way to silence the ring for calls of secondary users due to a missing permission check.](https://agentprime.io/advisories/CVE-2023-21378.md)
  `CVE-2023-21378` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In SELinux Policy, there is a possible restriction bypass due to a permissions bypass.](https://agentprime.io/advisories/CVE-2023-21377.md)
  `CVE-2023-21377` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2023-21376.md)
  `CVE-2023-21376` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 30 Oct 2023 · Tags: Privilege escalation
- [In Sysproxy, there is a possible out of bounds write due to an integer underflow.](https://agentprime.io/advisories/CVE-2023-21375.md)
  `CVE-2023-21375` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2023-21374.md)
  `CVE-2023-21374` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023 · Tags: Privilege escalation
- [In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check.](https://agentprime.io/advisories/CVE-2023-21373.md)
  `CVE-2023-21373` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In libdexfile, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-21372.md)
  `CVE-2023-21372` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Secure Element, there is a possible out of bounds write due to an integer overflow.](https://agentprime.io/advisories/CVE-2023-21371.md)
  `CVE-2023-21371` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In the Security Element API, there is a possible out of bounds write due to an integer overflow.](https://agentprime.io/advisories/CVE-2023-21370.md)
  `CVE-2023-21370` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Usage Access, there is a possible way to display a Settings usage access restriction toggle screen due to a permissions bypass.](https://agentprime.io/advisories/CVE-2023-21369.md)
  `CVE-2023-21369` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Audio, there is a possible out of bounds read due to missing bounds check.](https://agentprime.io/advisories/CVE-2023-21368.md)
  `CVE-2023-21368` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Scudo, there is a possible way to exploit certain heap OOB read/write issues due to an insecure implementation/design.](https://agentprime.io/advisories/CVE-2023-21367.md)
  `CVE-2023-21367` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Scudo, there is a possible way for an attacker to predict heap allocation patterns due to insecure implementation/design.](https://agentprime.io/advisories/CVE-2023-21366.md)
  `CVE-2023-21366` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Contacts, there is a possible crash loop due to resource exhaustion.](https://agentprime.io/advisories/CVE-2023-21365.md)
  `CVE-2023-21365` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In ContactsProvider, there is a possible crash loop due to resource exhaustion.](https://agentprime.io/advisories/CVE-2023-21364.md)
  `CVE-2023-21364` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Usage, there is a possible permanent DoS due to resource exhaustion.](https://agentprime.io/advisories/CVE-2023-21362.md)
  `CVE-2023-21362` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Bluetooth, there is a possibility of code-execution due to a use after free.](https://agentprime.io/advisories/CVE-2023-21361.md)
  `CVE-2023-21361` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Bluetooth, there is a possible out of bounds write due to improper input validation.](https://agentprime.io/advisories/CVE-2023-21360.md)
  `CVE-2023-21360` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023
- [In Bluetooth, there is a possible out of bounds read due to a missing bounds check.](https://agentprime.io/advisories/CVE-2023-21359.md)
  `CVE-2023-21359` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 30 Oct 2023

Newest: <https://agentprime.io/advisories/technology/google-android.md>
Older: <https://agentprime.io/advisories/technology/google-android.md?cursor=WyIyMDIzLTEwLTMwVDE2OjU2OjM4LjUyNDAwMFoiLCJDVkUtMjAyMy0yMTM1OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=google-android&cursor=WyIyMDIzLTEyLTA0VDIyOjQwOjQ5Ljc1MDAwMFoiLCJDVkUtMjAyMy0zNTY2OCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/google-android/?cursor=WyIyMDIzLTEyLTA0VDIyOjQwOjQ5Ljc1MDAwMFoiLCJDVkUtMjAyMy0zNTY2OCJd>. Everything for agents: <https://agentprime.io/llms.txt>.