# cve.now: Android

The newest entries naming Android as an affected vendor (up to 200), of 57 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-28576](https://cve.now/CVE-2026-28576.md): In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. (CVSS 10.0)
- [CVE-2025-8192](https://cve.now/CVE-2025-8192.md): Race condition in AndroidTV TvSettings (CVSS 6.9)
- [CVE-2024-7014](https://cve.now/CVE-2024-7014.md): Improper multimedia file attachment validation in Telegram for Android app (CVSS 7.1)
- [CVE-2019-2101](https://cve.now/CVE-2019-2101.md): In uvc\_parse\_standard\_control of uvc\_driver.c, there is a possible out-of-bound read due to improper input validation. (no CVSS)
- [CVE-2019-2099](https://cve.now/CVE-2019-2099.md): In nfa\_rw\_store\_ndef\_rx\_buf of nfa\_rw\_act.cc, there is a possible out-of-bound write due to a missing bounds check. (no CVSS)
- [CVE-2019-2098](https://cve.now/CVE-2019-2098.md): In areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible permissions bypass due to a missing permissions (no CVSS)
- [CVE-2019-2102](https://cve.now/CVE-2019-2102.md): In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK). (no CVSS)
- [CVE-2019-2097](https://cve.now/CVE-2019-2097.md): In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. (no CVSS)
- [CVE-2019-2096](https://cve.now/CVE-2019-2096.md): In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free. (no CVSS)
- [CVE-2019-2095](https://cve.now/CVE-2019-2095.md): In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race condition. (no CVSS)
- [CVE-2019-2094](https://cve.now/CVE-2019-2094.md): In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to missing bounds checks. (no CVSS)
- [CVE-2019-2093](https://cve.now/CVE-2019-2093.md): In huff\_dec\_1D of nlc\_dec.cpp, there is a possible out of bounds write due to a missing bounds check. (no CVSS)
- [CVE-2019-2092](https://cve.now/CVE-2019-2092.md): In isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission (no CVSS)
- [CVE-2019-2091](https://cve.now/CVE-2019-2091.md): In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing perm (no CVSS)
- [CVE-2019-2090](https://cve.now/CVE-2019-2090.md): In isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions bypass due to a missing permissions check. (no CVSS)
- [CVE-2019-2037](https://cve.now/CVE-2019-2037.md): In l2cu\_send\_peer\_config\_rej of l2c\_utils.cc, there is a possible out-of-bound read due to an incorrect bounds check. (no CVSS)
- [CVE-2019-2041](https://cve.now/CVE-2019-2041.md): In the configuration of NFC modules on certain devices, there is a possible failure to distinguish individual devices due to an insecure def (no CVSS)
- [CVE-2019-2032](https://cve.now/CVE-2019-2032.md): In SetScanResponseData of ble\_advertiser\_hci\_interface.cc, there is a possible out-of-bound write due to a missing bounds check. (no CVSS)
- [CVE-2019-2029](https://cve.now/CVE-2019-2029.md): In btm\_proc\_smp\_cback of tm\_ble.cc, there is a possible memory corruption due to a use after free. (no CVSS)
- [CVE-2019-2040](https://cve.now/CVE-2019-2040.md): In rw\_i93\_process\_ext\_sys\_info of rw\_i93.cc, there is a possible out-of-bound read due to a missing bounds check. (no CVSS)
- [CVE-2019-2039](https://cve.now/CVE-2019-2039.md): In rw\_i93\_sm\_detect\_ndef of rw\_i93.cc, there is a possible out-of-bound read due to a missing bounds check. (no CVSS)
- [CVE-2019-2038](https://cve.now/CVE-2019-2038.md): In rw\_i93\_process\_sys\_info of rw\_i93.cc, there is a possible out-of-bound read due to a missing bounds check. (no CVSS)
- [CVE-2019-2035](https://cve.now/CVE-2019-2035.md): In rw\_i93\_sm\_update\_ndef of rw\_i93.cc, there is a possible out-of-bound write due to a missing bounds check. (no CVSS)
- [CVE-2019-2034](https://cve.now/CVE-2019-2034.md): In rw\_i93\_sm\_read\_ndef of rw\_i93.cc, there is a possible out-of-bounds write due to an integer overflow. (no CVSS)
- [CVE-2019-2033](https://cve.now/CVE-2019-2033.md): In create\_hdr of dnssd\_clientstub.c, there is a possible use after free. (no CVSS)
- [CVE-2019-2031](https://cve.now/CVE-2019-2031.md): In rw\_t3t\_act\_handle\_check\_ndef\_rsp of rw\_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. (no CVSS)
- [CVE-2019-2030](https://cve.now/CVE-2019-2030.md): In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. (no CVSS)
- [CVE-2019-2028](https://cve.now/CVE-2019-2028.md): In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. (no CVSS)
- [CVE-2019-2027](https://cve.now/CVE-2019-2027.md): In floor0\_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS)
- [CVE-2019-2026](https://cve.now/CVE-2019-2026.md): In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission check. (no CVSS)
- [CVE-2019-2001](https://cve.now/CVE-2019-2001.md): The permissions on /proc/iomem were world-readable. (no CVSS)
- [CVE-2019-2000](https://cve.now/CVE-2019-2000.md): In several functions of binder.c, there is possible memory corruption due to a use after free. (no CVSS)
- [CVE-2019-1999](https://cve.now/CVE-2019-1999.md): In binder\_alloc\_free\_page of binder\_alloc.c, there is a possible double free due to improper locking. (no CVSS)
- [CVE-2019-1998](https://cve.now/CVE-2019-1998.md): In event\_handler of keymaster\_app.c, there is possible resource exhaustion due to a table being lost on reboot. (no CVSS)
- [CVE-2019-1997](https://cve.now/CVE-2019-1997.md): In random\_get\_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. (no CVSS)
- [CVE-2019-1996](https://cve.now/CVE-2019-1996.md): In avrc\_pars\_browse\_rsp of avrc\_pars\_ct.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS)
- [CVE-2019-1995](https://cve.now/CVE-2019-1995.md): In ComposeActivityEmail of ComposeActivityEmail.java, there is a possible way to silently attach files to an email due to a confused deputy. (no CVSS)
- [CVE-2019-1994](https://cve.now/CVE-2019-1994.md): In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings accessible due to an insecure default value. (no CVSS)
- [CVE-2019-1993](https://cve.now/CVE-2019-1993.md): In register\_app of btif\_hd.cc, there is a possible memory corruption due to an integer overflow. (no CVSS)
- [CVE-2019-1992](https://cve.now/CVE-2019-1992.md): In bta\_hl\_sdp\_query\_results of bta\_hl\_main.cc, there is a possible use-after-free due to a race condition. (no CVSS)
- [CVE-2019-1991](https://cve.now/CVE-2019-1991.md): In btif\_dm\_data\_copy of btif\_core.cc, there is a possible out of bounds write due to a buffer overflow. (no CVSS)
- [CVE-2019-1988](https://cve.now/CVE-2019-1988.md): In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. (no CVSS)
- [CVE-2019-1987](https://cve.now/CVE-2019-1987.md): In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. (no CVSS)
- [CVE-2019-1986](https://cve.now/CVE-2019-1986.md): In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. (no CVSS)
- [CVE-2018-9593](https://cve.now/CVE-2018-9593.md): In llcp\_dlc\_proc\_i\_pdu of llcp\_dlc.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possi (no CVSS)
- [CVE-2018-9592](https://cve.now/CVE-2018-9592.md): In mca\_ccb\_hdl\_rsp of mca\_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible (no CVSS)
- [CVE-2018-9591](https://cve.now/CVE-2018-9591.md): In bta\_hh\_ctrl\_dat\_act of bta\_hh\_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a pos (no CVSS)
- [CVE-2018-9590](https://cve.now/CVE-2018-9590.md): In add\_attr of sdp\_discovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out (no CVSS)
- [CVE-2018-9589](https://cve.now/CVE-2018-9589.md): In ieee802\_11\_rx\_wnmsleep\_req of wnm\_ap.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a p (no CVSS)
- [CVE-2018-9588](https://cve.now/CVE-2018-9588.md): In avdt\_scb\_hdl\_report of avdt\_scb\_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a p (no CVSS)
- [CVE-2018-9587](https://cve.now/CVE-2018-9587.md): In savePhotoFromUriToUri of ContactPhotoUtils.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, the (no CVSS)
- [CVE-2018-9586](https://cve.now/CVE-2018-9586.md): In run of InstallPackageTask.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, it is possible that (no CVSS)
- [CVE-2018-9585](https://cve.now/CVE-2018-9585.md): In nfc\_ncif\_proc\_get\_routing of nfc\_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a (no CVSS)
- [CVE-2018-9584](https://cve.now/CVE-2018-9584.md): In nfc\_ncif\_set\_config\_status of nfc\_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is (no CVSS)
- [CVE-2018-9583](https://cve.now/CVE-2018-9583.md): In bta\_ag\_parse\_cmer of bta\_ag\_cmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possi (no CVSS)
- [CVE-2018-9582](https://cve.now/CVE-2018-9582.md): In package installer in Android-8.0, Android-8.1 and Android-9, there is a possible bypass of the unknown source warning due to a confused d (no CVSS)
- [CVE-2017-6249](https://cve.now/CVE-2017-6249.md): An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code with (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/android
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.