Advisories · Technology

Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-26450 CVE record

CVSS 7.8 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-26449 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 4 Sept 2025
CVE-2025-26448 CVE record

CVSS 5.5 Medium

Use of uninitialized variable in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-26445 CVE record

CVSS 5.5 Medium

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-26443 CVE record

CVSS 7.3 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-26441 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-26437 CVE record

CVSS 5.5 Medium

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-26432 CVE record

CVSS 5.5 Medium

In multiple locations, there is a possible way to persistently DoS the device due to a missing length check.
- Google Android
- CWE-130
Not analysed yet 4 Sept 2025
CVE-2025-26444 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-26442 CVE record

CVSS 5.5 Medium

Incorrect authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-26440 CVE record

CVSS 7.8 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-26438 CVE record

CVSS 8.8 High

Improper authentication in Google Android
- Google Android
- Authentication bypass
Not analysed yet 4 Sept 2025
CVE-2025-26436 CVE record

CVSS 7.8 High

Incorrect authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-26435 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 4 Sept 2025
CVE-2025-26430 CVE record

CVSS 7.8 High

Improper authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-26429 CVE record

CVSS 5.5 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 4 Sept 2025
CVE-2025-26428 CVE record

CVSS 3.2 Low

Authentication bypass by spoofing in Google Android
- Google Android
- Authentication bypass
Not analysed yet 4 Sept 2025
CVE-2025-26427 CVE record

CVSS 4.4 Medium

Path traversal in Google Android
- Google Android
- Path traversal
Not analysed yet 4 Sept 2025
CVE-2025-26426 CVE record

CVSS 5.1 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 4 Sept 2025
CVE-2025-26425 CVE record

CVSS 4.0 Medium

Google Android: In multiple functions of RoleService.java…
- Google Android
- Privilege escalation
Not analysed yet 4 Sept 2025
CVE-2025-26424 CVE record

CVSS 4.0 Medium

Improper access control in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-26423 CVE record

CVSS 6.2 Medium

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 4 Sept 2025
CVE-2025-26422 CVE record

CVSS 4.0 Medium

In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check.
- Google Android
- CWE-279
Not analysed yet 4 Sept 2025
CVE-2025-26421 CVE record

CVSS 4.0 Medium

Authentication bypass by spoofing in Google Android
- Google Android
- Authentication bypass
Not analysed yet 4 Sept 2025
CVE-2025-26420 CVE record

CVSS 4.4 Medium

In multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the user into granting the incorrect permission due to permission overload.
- Google Android
- CWE-281
Not analysed yet 4 Sept 2025
CVE-2025-22425 CVE record

CVSS 5.1 Medium

Incorrect default permissions in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-0087 CVE record

CVSS 5.1 Medium

In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check.
- Google Android
- CWE-689
Not analysed yet 4 Sept 2025
CVE-2025-0077 CVE record

CVSS 4.0 Medium

In multiple functions of UserController.java, there is a possible lock screen bypass due to a race condition.
- Google Android
- CWE-1223
Not analysed yet 4 Sept 2025
CVE-2024-49739 CVE record

CVSS 4.0 Medium

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2023-35657 CVE record

CVSS 4.0 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-36887 CVE record

CVSS 7.8 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2024-56190 CVE record

CVSS 7.8 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
- CWE-20
Not analysed yet 4 Sept 2025
CVE-2024-56189 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-36909 CVE record

CVSS 5.3 Medium

Improper access control in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-36908 CVE record

CVSS 6.7 Medium

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-36907 CVE record

CVSS 7.3 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-36906 CVE record

CVSS 7.8 High

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-36905 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-36904 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 4 Sept 2025
CVE-2025-36903 CVE record

CVSS 7.8 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-36902 CVE record

CVSS 6.7 Medium

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-36901 CVE record

CVSS 8.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 4 Sept 2025
CVE-2025-36900 CVE record

CVSS 6.7 Medium

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-36899 CVE record

CVSS 8.4 High

Active debug code in Google Android
- Google Android
- CWE-489
Not analysed yet 4 Sept 2025
CVE-2025-36898 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-36897 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-36896 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 4 Sept 2025
CVE-2025-36895 CVE record

CVSS 7.5 High

Information disclosure in Google Android
- Google Android
- Information disclosure
Not analysed yet 4 Sept 2025
CVE-2025-36894 CVE record

CVSS 7.5 High

NULL pointer dereference in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-36893 CVE record

CVSS 5.5 Medium

Use of uninitialized resource in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-36892 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 4 Sept 2025
CVE-2025-36891 CVE record

CVSS 8.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 4 Sept 2025
CVE-2025-36890 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 4 Sept 2025
CVE-2025-26416 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Sept 2025
CVE-2025-22442 CVE record

CVSS 7.0 High

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 2 Sept 2025
CVE-2025-22439 CVE record

CVSS 7.3 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Sept 2025
CVE-2025-22438 CVE record

CVSS 7.8 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Sept 2025
CVE-2025-22437 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Sept 2025
CVE-2025-22435 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Type confusion in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Sept 2025
CVE-2025-22434 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Sept 2025