Advisories · Technology

Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-0121 CVE record

CVSS 2.9 Low

Use after free in Google Android
- Google Android
- Race condition
- Memory corruption
Not analysed yet 10 Mar 2026
CVE-2026-0120 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2026
CVE-2026-0119 CVE record

CVSS 6.8 Medium

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2026
CVE-2026-0118 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 10 Mar 2026
CVE-2026-0117 CVE record

CVSS 8.4 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2026
CVE-2026-0116 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2026
CVE-2026-0115 CVE record

CVSS 2.1 Low

In Trusted Execution Environment, there is a possible key leak due to side channel information disclosure.
- Google Android
- CWE-1300
Not analysed yet 10 Mar 2026
CVE-2026-0114 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2026
CVE-2026-0113 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2026
CVE-2026-0112 CVE record

CVSS 7.4 High

Use after free in Google Android
- Google Android
- Race condition
- Memory corruption
Not analysed yet 10 Mar 2026
CVE-2026-0111 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2026
CVE-2026-0110 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2026
CVE-2026-0109 CVE record

CVSS 7.5 High

In dhd_tcpdata_info_get of dhd_ip.c, there is a possible Denial of Service due to a precondition check failure.
- Google Android
- CWE-1419
Not analysed yet 10 Mar 2026
CVE-2026-0108 CVE record

CVSS 4.0 Medium

Improper access control in Google Android
- Google Android
- Broken access control
Not analysed yet 10 Mar 2026
CVE-2026-0107 CVE record

CVSS 8.4 High

In gmc_ddr_handle_mba_mr_req of gmc_mba_ddr.c, there is a possible escalation of privileges due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 10 Mar 2026
CVE-2025-36920 CVE record

CVSS 8.4 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
- CWE-20
Not analysed yet 10 Mar 2026
CVE-2025-48611 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2026
CVE-2025-48636 CVE record

CVSS 8.4 High

Path traversal in Google Android
- Google Android
- Path traversal
Not analysed yet 2 Mar 2026
CVE-2024-31328 CVE record

CVSS 8.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Mar 2026
CVE-2026-0047 CVE record

CVSS 8.4 High

In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check.
- Google Android
- CWE-280
Not analysed yet 2 Mar 2026
CVE-2026-0038 CVE record

CVSS 8.4 High

In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code.
- Google Android
Not analysed yet 2 Mar 2026
CVE-2026-0037 CVE record

CVSS 8.4 High

In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code.
- Google Android
Not analysed yet 2 Mar 2026
CVE-2026-0035 CVE record

CVSS 8.4 High

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Mar 2026
CVE-2026-0034 CVE record

CVSS 8.4 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Mar 2026
CVE-2026-0032 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 2 Mar 2026
CVE-2026-0031 CVE record

CVSS 8.4 High

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Mar 2026
CVE-2026-0030 CVE record

CVSS 8.4 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Mar 2026
CVE-2026-0029 CVE record

CVSS 8.4 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 2 Mar 2026
CVE-2026-0028 CVE record

CVSS 8.4 High

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Mar 2026
CVE-2026-0027 CVE record

CVSS 6.7 Medium

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Mar 2026
CVE-2026-0026 CVE record

CVSS 7.8 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Mar 2026
CVE-2026-0025 CVE record

CVSS 8.4 High

Information disclosure in Google Android
- Google Android
- Information disclosure
Not analysed yet 2 Mar 2026
CVE-2026-0024 CVE record

CVSS 4.0 Medium

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Mar 2026
CVE-2026-0023 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 2 Mar 2026
CVE-2026-0021 CVE record

CVSS 8.4 High

In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Mar 2026
CVE-2026-0020 CVE record

CVSS 8.4 High

Insecure direct object reference in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Mar 2026
CVE-2026-0017 CVE record

CVSS 7.7 High

Protection mechanism failure in Google Android
- Google Android
- Broken access control
- CWE-693
Not analysed yet 2 Mar 2026
CVE-2026-0015 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Mar 2026
CVE-2026-0014 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Mar 2026
CVE-2026-0013 CVE record

CVSS 8.4 High

In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Mar 2026
CVE-2026-0012 CVE record

CVSS 6.2 Medium

Improper access control in Google Android
- Google Android
- Broken access control
- CWE-693
Not analysed yet 2 Mar 2026
CVE-2026-0011 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CWE-703
Not analysed yet 2 Mar 2026
CVE-2026-0010 CVE record

CVSS 8.4 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Mar 2026
CVE-2026-0008 CVE record

CVSS 8.4 High

In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Mar 2026
CVE-2026-0007 CVE record

CVSS 7.8 High

Clickjacking in Google Android
- Google Android
- CWE-1021
Not analysed yet 2 Mar 2026
CVE-2026-0006 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Mar 2026
CVE-2026-0005 CVE record

CVSS 6.2 Medium

Information disclosure in Google Android
- Google Android
- Information disclosure
Not analysed yet 2 Mar 2026
CVE-2025-48654 CVE record

CVSS 7.8 High

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code.
- Google Android
- CWE-610
Not analysed yet 2 Mar 2026
CVE-2025-48653 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Mar 2026
CVE-2025-48650 CVE record

CVSS 8.4 High

SQL injection in Google Android
- Google Android
- SQL injection
Not analysed yet 2 Mar 2026
CVE-2025-48646 CVE record

CVSS 7.8 High

In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Mar 2026
CVE-2025-48645 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 2 Mar 2026
CVE-2025-48644 CVE record

CVSS 5.5 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Mar 2026
CVE-2025-48642 CVE record

CVSS 5.5 Medium

Information disclosure in Google Android
- Google Android
- Information disclosure
Not analysed yet 2 Mar 2026
CVE-2025-48641 CVE record

CVSS 7.0 High

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 2 Mar 2026
CVE-2025-48635 CVE record

CVSS 7.7 High

Protection mechanism failure in Google Android
- Google Android
- Information disclosure
- CWE-693
Not analysed yet 2 Mar 2026
CVE-2025-48634 CVE record

CVSS 8.4 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Mar 2026
CVE-2025-48630 CVE record

CVSS 7.4 High

In drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due to side channel information disclosure.
- Google Android
- CWE-208
Not analysed yet 2 Mar 2026
CVE-2025-48619 CVE record

CVSS 8.4 High

Improper access control in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Mar 2026
CVE-2025-48613 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 2 Mar 2026