Advisories · Technology

Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-58957 CVE record

CVSS 8.4 High

In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-58956 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58955 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-58953 CVE record

In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58951 CVE record

In multiple locations, there is a possible permission bypass due to a missing permission check.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58949 CVE record

CVSS 7.5 High

Stack-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58946 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58945 CVE record

In multiple locations, there is a possible side channel information leak due to improperly used crypto.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58944 CVE record

CVSS 8.4 High

In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-58943 CVE record

CVSS 8.4 High

In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-58942 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58938 CVE record

In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58937 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-58936 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58934 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58933 CVE record

CVSS 5.3 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58886 CVE record

CVSS 7.8 High

In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2026-58885 CVE record

CVSS 8.4 High

In multiple locations, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-58884 CVE record

CVSS 8.4 High

In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-58883 CVE record

In multiple locations, there is a possible denial of service due to a logic error in the code.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58882 CVE record

In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58879 CVE record

CVSS 8.4 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58877 CVE record

CVSS 4.0 Medium

In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-58876 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58875 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-58871 CVE record

CVSS 8.4 High

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58870 CVE record

In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-58868 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58867 CVE record

CVSS 8.4 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Nov 2026
CVE-2026-58866 CVE record

CVSS 8.4 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Nov 2026
CVE-2026-58857 CVE record

CVSS 8.1 High

Use after free in Google Android
- Google Android
- Race condition
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58853 CVE record

CVSS 7.5 High

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58847 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58845 CVE record

CVSS 8.4 High

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58844 CVE record

CVSS 8.4 High

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58838 CVE record

CVSS 4.0 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-58837 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58836 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58829 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58828 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58827 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58826 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58825 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58824 CVE record

CVSS 8.4 High

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-58821 CVE record

CVSS 6.2 Medium

SQL injection in Google Android
- Google Android
- SQL injection
Not analysed yet 2 Nov 2026
CVE-2026-58817 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-58814 CVE record

CVSS 7.5 High

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-55292 CVE record

CVSS 5.3 Medium

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-55289 CVE record

CVSS 8.4 High

In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-55288 CVE record

CVSS 8.4 High

In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception.
- Google Android
- CWE-248
Not analysed yet 2 Nov 2026
CVE-2026-55287 CVE record

CVSS 8.4 High

In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to misleading or insufficient UI.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2026-55283 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-55275 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Nov 2026
CVE-2026-55272 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-55271 CVE record

CVSS 8.4 High

In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-55264 CVE record

CVSS 4.0 Medium

In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-55263 CVE record

CVSS 8.4 High

In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2026-55262 CVE record

CVSS 8.4 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-55261 CVE record

CVSS 8.4 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Nov 2026
CVE-2026-55257 CVE record

CVSS 8.4 High

In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026