# Android security incidents · pwn.watch

> Security incidents tagged Android (vendor, product, platform or attack type).

Page: https://pwn.watch/t/android · generated 2026-10-22T18:10:31.291Z

## Status (as of 2026-10-22)
- Incidents: 15 (0 live, 0 live and not fully patched, 15 patched)
- Days without a Android security incident: 2
- Newest incident started: 2026-10-20

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/android.json
- RSS (one item per incident, bumped on each update): https://pwn.watch/t/android/feed.xml
- This file: https://pwn.watch/t/android/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Signal calls can stay live after hang-up (RingRTC CVE-2026-113380)](https://pwn.watch/i/signal-ringrtc-cve-2026-113380) ([json](https://pwn.watch/i/signal-ringrtc-cve-2026-113380.json)): critical, closed, patched, started 2026-10-20, CVE-2026-113380
- [Google Pixel: Google Pixel Improper Authorization Vulnerability](https://pwn.watch/i/google-pixel-cve-2026-58704) ([json](https://pwn.watch/i/google-pixel-cve-2026-58704.json)): high, closed, patched, started 2026-09-16, CVE-2026-58704
- [Android Framework: Android Framework Integer Overflow Vulnerability](https://pwn.watch/i/android-framework-cve-2025-48595) ([json](https://pwn.watch/i/android-framework-cve-2025-48595.json)): high, closed, patched, started 2026-06-02, CVE-2025-48595
- [Android Framework: 2 exploited vulnerabilities (CVE-2025-48572, CVE-2025-48633)](https://pwn.watch/i/android-framework-cve-2025-48572) ([json](https://pwn.watch/i/android-framework-cve-2025-48572.json)): high, closed, patched, started 2025-12-02, CVE-2025-48572, CVE-2025-48633
- [Android Runtime: Runtime Use-After-Free Vulnerability](https://pwn.watch/i/android-runtime-cve-2025-48543) ([json](https://pwn.watch/i/android-runtime-cve-2025-48543.json)): high, closed, patched, started 2025-09-04, CVE-2025-48543
- [Android Framework Privilege Escalation](https://pwn.watch/i/android-framework-cve-2024-43093) ([json](https://pwn.watch/i/android-framework-cve-2024-43093.json)): high, closed, patched, started 2024-11-07, CVE-2024-43093
- [Android Pixel Privilege Escalation](https://pwn.watch/i/android-pixel-cve-2024-32896) ([json](https://pwn.watch/i/android-pixel-cve-2024-32896.json)): high, closed, patched, started 2024-06-13, CVE-2024-32896
- [Android Kernel Remote Code Execution](https://pwn.watch/i/android-kernel-cve-2024-36971) ([json](https://pwn.watch/i/android-kernel-cve-2024-36971.json)): high, closed, patched, started 2024-06-10, CVE-2024-36971
- [Android Pixel: 2 actively exploited vulnerabilities](https://pwn.watch/i/android-pixel-cve-2024-29745-29748) ([json](https://pwn.watch/i/android-pixel-cve-2024-29745-29748.json)): high, closed, patched, started 2024-04-04, CVE-2024-29745, CVE-2024-29748
- [Android Pixel Information Disclosure](https://pwn.watch/i/android-pixel-cve-2023-21237) ([json](https://pwn.watch/i/android-pixel-cve-2023-21237.json)): medium, closed, patched, started 2024-03-05, CVE-2023-21237
- [Google Chromium Skia: Integer Overflow (CVE-2023-6345)](https://pwn.watch/i/google-chromium-skia-cve-2023-6345) ([json](https://pwn.watch/i/google-chromium-skia-cve-2023-6345.json)): critical, closed, patched, started 2023-11-30, CVE-2023-6345
- [Android Framework: Privilege Escalation (CVE-2023-35674)](https://pwn.watch/i/android-framework-cve-2023-35674) ([json](https://pwn.watch/i/android-framework-cve-2023-35674.json)): high, closed, patched, started 2023-09-13, CVE-2023-35674
- [Samsung Mobile Devices: Insertion of Sensitive Information Into Log File (CVE-2023-21492)](https://pwn.watch/i/samsung-mobile-devices-cve-2023-21492) ([json](https://pwn.watch/i/samsung-mobile-devices-cve-2023-21492.json)): medium, closed, patched, started 2023-05-19, CVE-2023-21492
- [Google Chromium Skia: Chrome Skia Integer Overflow (CVE-2023-2136)](https://pwn.watch/i/google-chromium-skia-cve-2023-2136) ([json](https://pwn.watch/i/google-chromium-skia-cve-2023-2136.json)): critical, closed, patched, started 2023-04-21, CVE-2023-2136
- [Android Framework: Privilege Escalation (CVE-2023-20963)](https://pwn.watch/i/android-framework-cve-2023-20963) ([json](https://pwn.watch/i/android-framework-cve-2023-20963.json)): high, closed, patched, started 2023-04-13, CVE-2023-20963