Advisories · Technology

Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-48609 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 2 Mar 2026
CVE-2025-48605 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Mar 2026
CVE-2025-48602 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Mar 2026
CVE-2025-48587 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Mar 2026
CVE-2025-48585 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Mar 2026
CVE-2025-48582 CVE record

CVSS 8.4 High

Symlink following in Google Android
- Google Android
- Path traversal
Not analysed yet 2 Mar 2026
CVE-2025-48579 CVE record

CVSS 8.4 High

In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Mar 2026
CVE-2025-48578 CVE record

CVSS 7.8 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Mar 2026
CVE-2025-48577 CVE record

CVSS 7.4 High

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 2 Mar 2026
CVE-2025-48574 CVE record

CVSS 8.4 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Mar 2026
CVE-2025-48568 CVE record

CVSS 7.4 High

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 2 Mar 2026
CVE-2025-48567 CVE record

CVSS 7.8 High

Path traversal in Google Android
- Google Android
- Path traversal
Not analysed yet 2 Mar 2026
CVE-2025-32313 CVE record

CVSS 8.4 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Mar 2026
CVE-2024-43766 CVE record

CVSS 6.5 Medium

Cleartext transmission of sensitive information in Google Android
- Google Android
- Weak cryptography or TLS
Not analysed yet 2 Mar 2026
CVE-2026-0106 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Feb 2026
CVE-2025-36911 CVE record

CVSS 7.1 High

In key-based pairing, there is a possible ID due to a logic error in the code.
- Google Android
Not analysed yet 15 Jan 2026
CVE-2025-36938 CVE record

CVSS 6.8 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 11 Dec 2025
CVE-2025-36937 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36936 CVE record

CVSS 7.8 High

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36935 CVE record

CVSS 7.8 High

Use of uninitialized variable in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36934 CVE record

CVSS 7.4 High

Race condition in Google Android
- Google Android
- Race condition
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36932 CVE record

CVSS 7.8 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 11 Dec 2025
CVE-2025-36931 CVE record

CVSS 7.8 High

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36930 CVE record

CVSS 7.8 High

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36929 CVE record

CVSS 5.5 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 11 Dec 2025
CVE-2025-36928 CVE record

CVSS 7.8 High

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36927 CVE record

CVSS 7.8 High

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36925 CVE record

CVSS 7.8 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36924 CVE record

CVSS 8.0 High

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36923 CVE record

CVSS 8.0 High

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36922 CVE record

CVSS 6.7 Medium

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36921 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36919 CVE record

CVSS 7.8 High

Double free in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36918 CVE record

CVSS 7.8 High

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36917 CVE record

CVSS 6.5 Medium

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Dec 2025
CVE-2025-36916 CVE record

CVSS 7.0 High

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 11 Dec 2025
CVE-2025-36912 CVE record

CVSS 6.5 Medium

In cellular modem, there is a possible denial of service due to a logic error in the code.
- Google Android
Not analysed yet 11 Dec 2025
CVE-2025-36889 CVE record

CVSS 5.5 Medium

In onCreateTasks of CameraActivity.java, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 11 Dec 2025
CVE-2025-48625 CVE record

CVSS 7.0 High

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 8 Dec 2025
CVE-2025-48608 CVE record

CVSS 5.5 Medium

Missing authentication in Google Android
- Google Android
- Authentication bypass
Not analysed yet 8 Dec 2025
CVE-2025-48606 CVE record

CVSS 7.8 High

In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation without a mechanism to uninstall it due to a logic error in the code.
- Google Android
Not analysed yet 8 Dec 2025
CVE-2025-48569 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 8 Dec 2025
CVE-2025-48639 CVE record

CVSS 7.3 High

Clickjacking in Google Android
- Google Android
- CWE-1021
Not analysed yet 8 Dec 2025
CVE-2025-48638 CVE record

CVSS 7.8 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
- CWE-20
Not analysed yet 8 Dec 2025
CVE-2025-48637 CVE record

CVSS 7.8 High

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 8 Dec 2025
CVE-2025-48633 CVE record

CVSS 5.5 MediumCritical · KEVKEV

In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code.
- Google Android
Not analysed yet 8 Dec 2025
CVE-2025-48632 CVE record

CVSS 7.8 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 8 Dec 2025
CVE-2025-48631 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 8 Dec 2025
CVE-2025-48629 CVE record

CVSS 7.8 High

In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure default value.
- Google Android
- CWE-1188
Not analysed yet 8 Dec 2025
CVE-2025-48628 CVE record

CVSS 7.8 High

In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 8 Dec 2025
CVE-2025-48627 CVE record

CVSS 7.8 High

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the background due to a logic error in the code.
- Google Android
Not analysed yet 8 Dec 2025
CVE-2025-48626 CVE record

CVSS 8.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Dec 2025
CVE-2025-48624 CVE record

CVSS 7.8 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
- CWE-20
Not analysed yet 8 Dec 2025
CVE-2025-48623 CVE record

CVSS 7.8 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
- CWE-20
Not analysed yet 8 Dec 2025
CVE-2025-48622 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 8 Dec 2025
CVE-2025-48621 CVE record

CVSS 7.3 High

In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default.
- Google Android
- CWE-1188
Not analysed yet 8 Dec 2025
CVE-2025-48620 CVE record

CVSS 7.8 High

In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application's component name to persist even after uninstalling due to a logic error in the…
- Google Android
Not analysed yet 8 Dec 2025
CVE-2025-48618 CVE record

CVSS 6.6 Medium

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking.
- Google Android
- CWE-667
Not analysed yet 8 Dec 2025
CVE-2025-48615 CVE record

CVSS 7.8 High

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 8 Dec 2025
CVE-2025-48614 CVE record

CVSS 4.3 Medium

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 8 Dec 2025