Advisories · Technology

Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-58977 CVE record

CVSS 6.7 Medium

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58930 CVE record

An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving a hardcoded `content://` URI.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58927 CVE record

The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within `EvsEnumerator::openCamera()`.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58926 CVE record

CVSS 2.5 Low

Use after free in Google Android
- Google Android
- Race condition
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58925 CVE record

Google Android: The report details a heap Use-After-Free (UAF) vulnerability within the…
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58924 CVE record

The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58915 CVE record

CVSS 6.1 Medium

Improper authentication in Google Android
- Google Android
- Authentication bypass
Not analysed yet 2 Nov 2026
CVE-2026-49906 CVE record

CVSS 7.8 High

Google Android: An unprivileged application can bypass the…
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-49903 CVE record

Google Android: The `ClusterRenderingService.dump()` method…
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-59048 CVE record

In rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds check.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-59047 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-59046 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-59045 CVE record

CVSS 7.4 High

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 2 Nov 2026
CVE-2026-59044 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-59043 CVE record

CVSS 7.4 High

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 2 Nov 2026
CVE-2026-59042 CVE record

CVSS 7.4 High

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 2 Nov 2026
CVE-2026-59031 CVE record

CVSS 6.2 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-59028 CVE record

CVSS 8.4 High

In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-59022 CVE record

In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic error in the code.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-59021 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-59020 CVE record

CVSS 5.9 Medium

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 2 Nov 2026
CVE-2026-59016 CVE record

CVSS 8.4 High

Path traversal in Google Android
- Google Android
- Path traversal
Not analysed yet 2 Nov 2026
CVE-2026-59015 CVE record

CVSS 4.0 Medium

In multiple locations, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-59014 CVE record

CVSS 8.4 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-59012 CVE record

In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission check.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-59011 CVE record

In multiple locations, there is a possible permission bypass due to a logic error in the code.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-59010 CVE record

CVSS 6.2 Medium

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-59008 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-59007 CVE record

CVSS 5.3 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-59006 CVE record

CVSS 4.0 Medium

In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2026-59005 CVE record

CVSS 8.4 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Nov 2026
CVE-2026-59004 CVE record

CVSS 8.4 High

In multiple locations, there is a possible permission bypass due to an uncaught exception.
- Google Android
- CWE-248
Not analysed yet 2 Nov 2026
CVE-2026-59003 CVE record

CVSS 4.0 Medium

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Nov 2026
CVE-2026-59002 CVE record

In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-59001 CVE record

In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error in the code.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-59000 CVE record

CVSS 8.4 High

In multiple locations, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-58997 CVE record

In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58995 CVE record

CVSS 8.4 High

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58994 CVE record

CVSS 8.4 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Nov 2026
CVE-2026-58990 CVE record

In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overflow.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58989 CVE record

CVSS 8.4 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Nov 2026
CVE-2026-58988 CVE record

CVSS 4.0 Medium

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58986 CVE record

CVSS 8.4 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Nov 2026
CVE-2026-58985 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-58984 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58979 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58978 CVE record

CVSS 6.8 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58976 CVE record

In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58975 CVE record

CVSS 8.4 High

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58974 CVE record

CVSS 8.4 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 2 Nov 2026
CVE-2026-58971 CVE record

In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58970 CVE record

CVSS 8.4 High

In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-58969 CVE record

In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58968 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Double free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58966 CVE record

CVSS 8.4 High

Stack-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58965 CVE record

CVSS 8.4 High

In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-58964 CVE record

CVSS 8.4 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-58963 CVE record

In multiple locations, there is a possible denial of service due to improper input validation.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58962 CVE record

CVSS 8.4 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 2 Nov 2026
CVE-2026-58961 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026