vpn-attacks/vendor-patches/Android/Android Release Security Ac...

<!DOCTYPE html>
<html dir="ltr" lang="en"><head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8"><style>body {transition: opacity ease-in 0.2s; } 
body[unresolved] {opacity: 0; display: block; overflow: hidden; position: relative; } 
</style>
    
    
    <meta name="google-signin-client-id" content="721724668570-nbkv1cfusk7kk4eni4pjvepaus73b13t.apps.googleusercontent.com">
    <meta name="google-signin-scope" content="profile email">
    <meta property="og:site_name" content="Android Open Source Project">
    <meta property="og:type" content="website">
    

      <meta name="theme-color" content="#3ddc84">
    

    <meta charset="utf-8">
    <meta content="IE=Edge" http-equiv="X-UA-Compatible">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <link rel="manifest" href="https://source.android.com/_pwa/androidsource/manifest.json" crossorigin="use-credentials">
    <link rel="preconnect" href="https://www.gstatic.com/" crossorigin="">
    <link rel="preconnect" href="https://fonts.gstatic.com/" crossorigin="">
    <link rel="preconnect" href="https://fonts.googleapis.com/" crossorigin="">
    <link rel="preconnect" href="https://apis.google.com/" crossorigin="">
    <link rel="preconnect" href="https://www.google-analytics.com/" crossorigin="">
    
      <link rel="stylesheet" href="Android%20Release%20Security%20Acknowledgements_files/css.css">
      
      <link rel="stylesheet" href="Android%20Release%20Security%20Acknowledgements_files/app.css">
    

    <noscript>
      
    </noscript>
    <link rel="shortcut icon" href="https://www.gstatic.com/devrel-devsite/prod/vbd4700e58d826f0eab371eadc20e0e343567df356800794a790eebf2ac059db2/androidsource/images/favicon.png">
    <link rel="apple-touch-icon" href="https://www.gstatic.com/devrel-devsite/prod/vbd4700e58d826f0eab371eadc20e0e343567df356800794a790eebf2ac059db2/androidsource/images/touchicon-180.png"><link rel="canonical" href="https://source.android.com/security/overview/release-acknowledgements"><link rel="search" type="application/opensearchdescription+xml" title="Android Open Source Project" href="https://source.android.com/s/opensearch.xml">
      

<title>Android Release Security Acknowledgements</title>

<meta property="og:title" content="Android Release Security Acknowledgements">


  <meta property="og:url" content="https://source.android.com/security/overview/release-acknowledgements">


  <meta property="og:locale" content="en">


    <script src="Android%20Release%20Security%20Acknowledgements_files/webcomponents-lite.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_app_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_a11y_announce_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_analytics_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_book_nav_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_content_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_expandable_nav_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_footer_linkboxes_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_footer_promos_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_footer_utility_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_header_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_heading_link_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_language_selector_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_page_rating_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_progress_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_search_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_select_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_sitemask_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_snackbar_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_tabs_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_toc_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_tooltip_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_user_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><script src="Android%20Release%20Security%20Acknowledgements_files/devsite_devsite_spinner_module.js" nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ"></script><style nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ" type="text/css"></style></head>
  <body type="article" theme="androidsource-theme" class="" layout="docs" data-new-gr-c-s-check-loaded="8.869.0" data-gr-ext-installed="" ready="">
    <devsite-progress id="app-progress"></devsite-progress>
  
    <section class="devsite-wrapper"><devsite-header keep-tabs-visible="" top-row--height="48" bottom-row--height="108" bottom-tabs--height="48" fixed="" offset="10">
  
    
<div class="devsite-header--inner nocontent">
  <div class="devsite-top-logo-row-wrapper-wrapper">
    <div class="devsite-top-logo-row-wrapper">
      <div class="devsite-top-logo-row">
        <button type="button" id="devsite-hamburger-menu" class="devsite-header-icon-button button-flat material-icons gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Navigation menu button" aria-label="Open menu">
        </button>
        <div class="devsite-product-name-wrapper">

  <a href="https://source.android.com/" class="devsite-site-logo-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Site logo" track-type="globalNav" track-name="androidOpenSourceProject" track-metadata-position="nav" track-metadata-eventdetail="nav">

  <img src="Android%20Release%20Security%20Acknowledgements_files/lockup.svg" class="devsite-site-logo" alt="Android Open Source Project">

</a>


  <span class="devsite-product-name">
    <ul class="devsite-breadcrumb-list">
  
  <li class="devsite-breadcrumb-item
             ">
    
    
  </li>
  
</ul>
  </span>

</div>
        <div class="devsite-top-logo-row-middle">
          <div class="devsite-header-upper-tabs">
            
              
  <devsite-tabs class="upper-tabs" connected="">

    
  <nav class="devsite-tabs-wrapper" aria-label="Upper tabs">
      
        
          <tab>
            <a href="https://source.android.com/setup" class="gc-analytics-event " track-type="globalNav" track-metadata-position="nav" track-metadata-eventdetail="nav" track-name="setUp" data-category="Site-Wide Custom Events" data-label="Tab: Set up">
  Set up
</a>

          </tab>
        
      
          <tab>
            <a href="https://source.android.com/compatibility" class="gc-analytics-event " track-type="globalNav" track-metadata-position="nav" track-metadata-eventdetail="nav" track-name="design" data-category="Site-Wide Custom Events" data-label="Tab: Design">
  Design
</a>

          </tab>
        
      
          <tab active="">
            <a href="https://source.android.com/security" class="gc-analytics-event " track-type="globalNav" track-metadata-position="nav" track-metadata-eventdetail="nav" track-name="secure" aria-label="Secure, selected" data-category="Site-Wide Custom Events" data-label="Tab: Secure">
  Secure
</a>

          </tab>
        
      
          <tab>
            <a href="https://source.android.com/devices" class="gc-analytics-event " track-type="globalNav" track-metadata-position="nav" track-metadata-eventdetail="nav" track-name="develop" data-category="Site-Wide Custom Events" data-label="Tab: Develop">
  Develop
</a>

          </tab>
        
      
          <tab>
            <a href="https://source.android.com/devices/tech" class="gc-analytics-event " track-type="globalNav" track-metadata-position="nav" track-metadata-eventdetail="nav" track-name="configure" data-category="Site-Wide Custom Events" data-label="Tab: Configure">
  Configure
</a>

          </tab>
        
      
          <tab>
            <a href="https://source.android.com/reference" class="gc-analytics-event " track-type="globalNav" track-metadata-position="nav" track-metadata-eventdetail="nav" track-name="reference" data-category="Site-Wide Custom Events" data-label="Tab: Reference">
  Reference
</a>

          </tab>
        
      
    <tab overflow-tab="" hidden=""><a href="#" class="devsite-icon devsite-icon-arrow-drop-down">More</a><div class="devsite-tabs-overflow-menu" scrollbars="" hidden=""></div></tab></nav></devsite-tabs>

            
           </div>
          
<devsite-search aria-expanded="false" aria-haspopup="listbox" enable-signin="" enable-search="" enable-suggestions="" enable-query-completion="" project-name="Android Open Source Project" tenant-name="Android Open Source Project" role="combobox">
  <form class="devsite-search-form" action="https://source.android.com/s/results" method="GET">
    <div class="devsite-search-container">
      <div class="devsite-searchbox">
        <input aria-activedescendant="" aria-autocomplete="list" aria-label="Search" aria-haspopup="false" aria-multiline="false" autocomplete="off" class="devsite-search-field devsite-search-query" name="q" placeholder="Search" type="text" aria-controls="devsite-search-popout-container-id-1">
        <div class="devsite-search-image material-icons" aria-hidden="true"></div>
      </div>
      <button type="button" search-open="" class="devsite-search-button devsite-header-icon-button button-flat material-icons" aria-label="Open search"></button>
    </div>
  <div class="devsite-popout" id="devsite-search-popout-container-id-1"><div class="devsite-popout-result devsite-suggest-results-container" devsite-hide=""></div></div></form>
  <button type="button" search-close="" class="devsite-search-button devsite-header-icon-button button-flat material-icons" aria-label="Close search"></button>
</devsite-search>

        <div class="devsite-search-background" style="opacity: 1;"></div></div>

        
<devsite-language-selector>
  <devsite-select class="devsite-language-selector-menu">
    
    <select aria-label="Select your language preference." class="devsite-language-selector-select" name="language" track-name="click" track-type="languageSelector">
    
      
      <option selected="selected">Language</option>
    
    
      <option value="en" track-metadata-original-language="en" track-metadata-selected-language="en" track-name="changed" track-type="languageSelector" lang="en">
        English
      </option>
    
      <option value="id" track-metadata-original-language="en" track-metadata-selected-language="id" track-name="changed" track-type="languageSelector" lang="id">
        Bahasa Indonesia
      </option>
    
      <option value="de" track-metadata-original-language="en" track-metadata-selected-language="de" track-name="changed" track-type="languageSelector" lang="de">
        Deutsch
      </option>
    
      <option value="es_419" track-metadata-original-language="en" track-metadata-selected-language="es_419" track-name="changed" track-type="languageSelector" lang="es_419">
        Español – América Latina
      </option>
    
      <option value="fr" track-metadata-original-language="en" track-metadata-selected-language="fr" track-name="changed" track-type="languageSelector" lang="fr">
        Français
      </option>
    
      <option value="it" track-metadata-original-language="en" track-metadata-selected-language="it" track-name="changed" track-type="languageSelector" lang="it">
        Italiano
      </option>
    
      <option value="pl" track-metadata-original-language="en" track-metadata-selected-language="pl" track-name="changed" track-type="languageSelector" lang="pl">
        Polski
      </option>
    
      <option value="pt_br" track-metadata-original-language="en" track-metadata-selected-language="pt_br" track-name="changed" track-type="languageSelector" lang="pt_br">
        Português – Brasil
      </option>
    
      <option value="vi" track-metadata-original-language="en" track-metadata-selected-language="vi" track-name="changed" track-type="languageSelector" lang="vi">
        Tiếng Việt
      </option>
    
      <option value="tr" track-metadata-original-language="en" track-metadata-selected-language="tr" track-name="changed" track-type="languageSelector" lang="tr">
        Türkçe
      </option>
    
      <option value="ru" track-metadata-original-language="en" track-metadata-selected-language="ru" track-name="changed" track-type="languageSelector" lang="ru">
        Русский
      </option>
    
      <option value="he" track-metadata-original-language="en" track-metadata-selected-language="he" track-name="changed" track-type="languageSelector" lang="he">
        עברית'
      </option>
    
      <option value="ar" track-metadata-original-language="en" track-metadata-selected-language="ar" track-name="changed" track-type="languageSelector" lang="ar">
        العربيّة
      </option>
    
      <option value="fa" track-metadata-original-language="en" track-metadata-selected-language="fa" track-name="changed" track-type="languageSelector" lang="fa">
        فارسی
      </option>
    
      <option value="hi" track-metadata-original-language="en" track-metadata-selected-language="hi" track-name="changed" track-type="languageSelector" lang="hi">
        हिंदी
      </option>
    
      <option value="bn" track-metadata-original-language="en" track-metadata-selected-language="bn" track-name="changed" track-type="languageSelector" lang="bn">
        বাংলা
      </option>
    
      <option value="th" track-metadata-original-language="en" track-metadata-selected-language="th" track-name="changed" track-type="languageSelector" lang="th">
        ภาษาไทย
      </option>
    
      <option value="zh_cn" track-metadata-original-language="en" track-metadata-selected-language="zh_cn" track-name="changed" track-type="languageSelector" lang="zh_cn">
        中文 – 简体
      </option>
    
      <option value="zh_tw" track-metadata-original-language="en" track-metadata-selected-language="zh_tw" track-name="changed" track-type="languageSelector" lang="zh_tw">
        中文 – 繁體
      </option>
    
      <option value="ja" track-metadata-original-language="en" track-metadata-selected-language="ja" track-name="changed" track-type="languageSelector" lang="ja">
        日本語
      </option>
    
      <option value="ko" track-metadata-original-language="en" track-metadata-selected-language="ko" track-name="changed" track-type="languageSelector" lang="ko">
        한국어
      </option>
    
    </select>
  <div class="devsite-select"><label id="devsite-select-19413537756855532-label" style="display:none;" aria-label="Select your language preference.">Select an option</label><button type="button" class="devsite-select-toggle" id="devsite-select-19413537756855532-button" aria-haspopup="true" aria-labelledby="devsite-select-19413537756855532-label devsite-select-19413537756855532-button" aria-controls="devsite-select-19413537756855532-popup">Language</button><span class="devsite-icon devsite-icon-arrow-drop-down devsite-select-toggle-icon" aria-hidden="true"></span><ul class="devsite-select-list" id="devsite-select-19413537756855532-popup" tabindex="-1" role="listbox" scrollbars="" aria-labelledby="devsite-select-19413537756855532-button"><li role="option" id="devsite-select-19413537756855532-0" class="devsite-select-item" data-index="0" aria-selected="false" aria-label="Language">Language</li><li role="option" id="devsite-select-19413537756855532-1" class="devsite-select-item" data-index="1" aria-selected="false" aria-label="English" value="en" lang="en">English</li><li role="option" id="devsite-select-19413537756855532-2" class="devsite-select-item" data-index="2" aria-selected="false" aria-label="Bahasa Indonesia" value="id" lang="id">Bahasa Indonesia</li><li role="option" id="devsite-select-19413537756855532-3" class="devsite-select-item" data-index="3" aria-selected="false" aria-label="Deutsch" value="de" lang="de">Deutsch</li><li role="option" id="devsite-select-19413537756855532-4" class="devsite-select-item" data-index="4" aria-selected="false" aria-label="Español – América Latina" value="es_419" lang="es_419">Español – América Latina</li><li role="option" id="devsite-select-19413537756855532-5" class="devsite-select-item" data-index="5" aria-selected="false" aria-label="Français" value="fr" lang="fr">Français</li><li role="option" id="devsite-select-19413537756855532-6" class="devsite-select-item" data-index="6" aria-selected="false" aria-label="Italiano" value="it" lang="it">Italiano</li><li role="option" id="devsite-select-19413537756855532-7" class="devsite-select-item" data-index="7" aria-selected="false" aria-label="Polski" value="pl" lang="pl">Polski</li><li role="option" id="devsite-select-19413537756855532-8" class="devsite-select-item" data-index="8" aria-selected="false" aria-label="Português – Brasil" value="pt_br" lang="pt_br">Português – Brasil</li><li role="option" id="devsite-select-19413537756855532-9" class="devsite-select-item" data-index="9" aria-selected="false" aria-label="Tiếng Việt" value="vi" lang="vi">Tiếng Việt</li><li role="option" id="devsite-select-19413537756855532-10" class="devsite-select-item" data-index="10" aria-selected="false" aria-label="Türkçe" value="tr" lang="tr">Türkçe</li><li role="option" id="devsite-select-19413537756855532-11" class="devsite-select-item" data-index="11" aria-selected="false" aria-label="Русский" value="ru" lang="ru">Русский</li><li role="option" id="devsite-select-19413537756855532-12" class="devsite-select-item" data-index="12" aria-selected="false" aria-label="עברית'" value="he" lang="he">עברית'</li><li role="option" id="devsite-select-19413537756855532-13" class="devsite-select-item" data-index="13" aria-selected="false" aria-label="العربيّة" value="ar" lang="ar">العربيّة</li><li role="option" id="devsite-select-19413537756855532-14" class="devsite-select-item" data-index="14" aria-selected="false" aria-label="فارسی" value="fa" lang="fa">فارسی</li><li role="option" id="devsite-select-19413537756855532-15" class="devsite-select-item" data-index="15" aria-selected="false" aria-label="हिंदी" value="hi" lang="hi">हिंदी</li><li role="option" id="devsite-select-19413537756855532-16" class="devsite-select-item" data-index="16" aria-selected="false" aria-label="বাংলা" value="bn" lang="bn">বাংলা</li><li role="option" id="devsite-select-19413537756855532-17" class="devsite-select-item" data-index="17" aria-selected="false" aria-label="ภ�
</devsite-language-selector>


  <a class="devsite-header-link devsite-top-button button gc-analytics-event" href="https://android-review.googlesource.com/" data-category="Site-Wide Custom Events" data-label="Site header link">
    Go to code
  </a>
  
        
          <devsite-user id="devsite-user" sign-in-url="https://source.android.com/_d/signin?continue=https%3A%2F%2Fsource.android.com%2Fsecurity%2Foverview%2Frelease-acknowledgements&amp;prompt=select_account" sign-out-url="https://source.android.com/_d/signout?continue=https%3A%2F%2Fsource.android.com%2Fsecurity%2Foverview%2Frelease-acknowledgements" url="https://source.android.com/_d/signout?continue=https%3A%2F%2Fsource.android.com%2Fsecurity%2Foverview%2Frelease-acknowledgements"><div class="ogb-wrapper ogb-si"><a href="https://source.android.com/_d/signin?continue=https%3A%2F%2Fsource.android.com%2Fsecurity%2Foverview%2Frelease-acknowledgements&amp;prompt=select_account" class="devsite-user-signin button devsite-top-button" track-type="globalNav" track-name="signIn" track-metadata-eventdetail="nav" track-metadata-position="nav">
  Sign in
</a></div></devsite-user>
           
        
      </div>
    </div>
  </div>


  <div class="devsite-collapsible-section
    " style="transform: translate3d(0px, -10px, 0px);">
    <div class="devsite-header-background">
      
        
          <div class="devsite-product-id-row">
            <div class="devsite-product-description-row">
              
                
                  <ul class="devsite-breadcrumb-list">
  
  <li class="devsite-breadcrumb-item
             ">
    
    
  <a href="https://source.android.com/security" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Lower Header" data-value="1" track-type="globalNav" track-name="breadcrumb" track-metadata-position="1" track-metadata-eventdetail="">
    
        Secure
      
  </a>
  
    
  </li>
  
</ul>
                
              
            </div>
            
          </div>
          
        
        <div class="devsite-doc-set-nav-row">
          
          
  <devsite-tabs class="lower-tabs" connected="">

    
  <nav class="devsite-tabs-wrapper" aria-label="Lower tabs">
      
        
          <tab active="">
            <a href="https://source.android.com/security" class="gc-analytics-event " track-type="globalNav" track-metadata-position="nav" track-metadata-eventdetail="nav" track-name="overview" aria-label="Overview, selected" data-category="Site-Wide Custom Events" data-label="Tab: Overview">
  Overview
</a>

          </tab>
        
      
          <tab>
            <a href="https://source.android.com/security/bulletin" class="gc-analytics-event " track-type="globalNav" track-metadata-position="nav" track-metadata-eventdetail="nav" track-name="bulletins" data-category="Site-Wide Custom Events" data-label="Tab: Bulletins">
  Bulletins
</a>

          </tab>
        
      
          <tab>
            <a href="https://source.android.com/security/features" class="gc-analytics-event " track-type="globalNav" track-metadata-position="nav" track-metadata-eventdetail="nav" track-name="features" data-category="Site-Wide Custom Events" data-label="Tab: Features">
  Features
</a>

          </tab>
        
      
          <tab>
            <a href="https://source.android.com/devices/tech/debug/fuzz-sanitize" class="gc-analytics-event " track-type="globalNav" track-metadata-position="nav" track-metadata-eventdetail="nav" track-name="testing" data-category="Site-Wide Custom Events" data-label="Tab: Testing">
  Testing
</a>

          </tab>
        
      
          <tab>
            <a href="https://source.android.com/security/best-practices" class="gc-analytics-event " track-type="globalNav" track-metadata-position="nav" track-metadata-eventdetail="nav" track-name="bestPractices" data-category="Site-Wide Custom Events" data-label="Tab: Best Practices">
  Best Practices
</a>

          </tab>
        
      
    <tab overflow-tab="" hidden=""><a href="#" class="devsite-icon devsite-icon-arrow-drop-down">More</a><div class="devsite-tabs-overflow-menu" scrollbars="" hidden=""></div></tab></nav></devsite-tabs>

          
        </div>
      
    </div>
  </div>

</div>


</devsite-header>
      <div class="devsite-book-nav-bg" fixed=""></div><devsite-book-nav scrollbars="" animatable="" fixed="" style="top: 156px; max-height: 1153px; transform: translate3d(0px, -10px, 0px);">
        
          
<nav class="devsite-book-nav devsite-nav nocontent" aria-label="Side menu" animatable="">
  <div class="devsite-mobile-header">
    <button type="button" id="devsite-close-nav" class="devsite-header-icon-button button-flat material-icons gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close navigation" aria-label="Close navigation">
    </button>
    <div class="devsite-product-name-wrapper">

  <a href="https://source.android.com/" class="devsite-site-logo-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Site logo" track-type="globalNav" track-name="androidOpenSourceProject" track-metadata-position="nav" track-metadata-eventdetail="nav">

  <img src="Android%20Release%20Security%20Acknowledgements_files/lockup.svg" class="devsite-site-logo" alt="Android Open Source Project">

</a>


      <span class="devsite-product-name">
        
        
        <ul class="devsite-breadcrumb-list">
  
  <li class="devsite-breadcrumb-item
             ">
    
    
  </li>
  
</ul>
      </span>
    

</div>
  </div>

  <div class="devsite-book-nav-wrapper">
    <div class="devsite-mobile-nav-top">
      
        <ul class="devsite-nav-list">
          
            <li class="devsite-nav-item">
              
  
  <a href="https://source.android.com/setup" class="devsite-nav-title gc-analytics-event
              
              " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Set up" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav" track-name="setUp">
  
    <span class="devsite-nav-text" tooltip="">
      Set up
   </span>
    
  
  </a>
  

            </li>
          
            <li class="devsite-nav-item">
              
  
  <a href="https://source.android.com/compatibility" class="devsite-nav-title gc-analytics-event
              
              " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Design" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav" track-name="design">
  
    <span class="devsite-nav-text" tooltip="">
      Design
   </span>
    
  
  </a>
  

            </li>
          
            <li class="devsite-nav-item">
              
  
  <a href="https://source.android.com/security" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Secure" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav" track-name="secure">
  
    <span class="devsite-nav-text" tooltip="">
      Secure
   </span>
    
  
  </a>
  

                <ul class="devsite-nav-responsive-tabs">
                  
                    
                    <li class="devsite-nav-item">
                      
  
  <a href="https://source.android.com/security" class="devsite-nav-title gc-analytics-event devsite-nav-has-children" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Overview" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav" track-name="overview">
  
    <span class="devsite-nav-text" tooltip="" menu="_book">
      Overview
   </span>
    
    <span class="devsite-nav-icon material-icons" data-icon="forward" menu="_book">
    </span>
    
  
  </a>
  

                    </li>
                  
                    
                    <li class="devsite-nav-item">
                      
  
  <a href="https://source.android.com/security/bulletin" class="devsite-nav-title gc-analytics-event
              devsite-nav-has-children
              " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Bulletins" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav" track-name="bulletins">
  
    <span class="devsite-nav-text" tooltip="">
      Bulletins
   </span>
    
    <span class="devsite-nav-icon material-icons" data-icon="forward">
    </span>
    
  
  </a>
  

                    </li>
                  
                    
                    <li class="devsite-nav-item">
                      
  
  <a href="https://source.android.com/security/features" class="devsite-nav-title gc-analytics-event
              devsite-nav-has-children
              " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Features" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav" track-name="features">
  
    <span class="devsite-nav-text" tooltip="">
      Features
   </span>
    
    <span class="devsite-nav-icon material-icons" data-icon="forward">
    </span>
    
  
  </a>
  

                    </li>
                  
                    
                    <li class="devsite-nav-item">
                      
  
  <a href="https://source.android.com/devices/tech/debug/fuzz-sanitize" class="devsite-nav-title gc-analytics-event
              devsite-nav-has-children
              " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Testing" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav" track-name="testing">
  
    <span class="devsite-nav-text" tooltip="">
      Testing
   </span>
    
    <span class="devsite-nav-icon material-icons" data-icon="forward">
    </span>
    
  
  </a>
  

                    </li>
                  
                    
                    <li class="devsite-nav-item">
                      
  
  <a href="https://source.android.com/security/best-practices" class="devsite-nav-title gc-analytics-event
              devsite-nav-has-children
              " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Best Practices" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav" track-name="bestPractices">
  
    <span class="devsite-nav-text" tooltip="">
      Best Practices
   </span>
    
    <span class="devsite-nav-icon material-icons" data-icon="forward">
    </span>
    
  
  </a>
  

                    </li>
                  
                </ul>
              
            </li>
          
            <li class="devsite-nav-item">
              
  
  <a href="https://source.android.com/devices" class="devsite-nav-title gc-analytics-event
              
              " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Develop" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav" track-name="develop">
  
    <span class="devsite-nav-text" tooltip="">
      Develop
   </span>
    
  
  </a>
  

            </li>
          
            <li class="devsite-nav-item">
              
  
  <a href="https://source.android.com/devices/tech" class="devsite-nav-title gc-analytics-event
              
              " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Configure" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav" track-name="configure">
  
    <span class="devsite-nav-text" tooltip="">
      Configure
   </span>
    
  
  </a>
  

            </li>
          
            <li class="devsite-nav-item">
              
  
  <a href="https://source.android.com/reference" class="devsite-nav-title gc-analytics-event
              
              " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Reference" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav" track-name="reference">
  
    <span class="devsite-nav-text" tooltip="">
      Reference
   </span>
    
  
  </a>
  

            </li>
          
          
<li class="devsite-nav-item">

  
  <a href="https://android-review.googlesource.com/" class="devsite-nav-title gc-analytics-event
              
              " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Go to code" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav" track-name="goToCode">
  
    <span class="devsite-nav-text" tooltip="">
      Go to code
   </span>
    
  
  </a>
  

</li>

  
        </ul>
      
    </div>
    
      <div class="devsite-mobile-nav-bottom" role="navigation">
        
          
          <ul class="devsite-nav-list" menu="_book">
            <li class="devsite-nav-item
           devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"><span class="devsite-nav-text" tooltip="">Security Overview</span></div></li>

  <li class="devsite-nav-item"><a href="https://source.android.com/security" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Overview</span></a></li>

  <li class="devsite-nav-item"><a href="https://source.android.com/security/overview/kernel-security" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Kernel Security</span></a></li>

  <li class="devsite-nav-item"><a href="https://source.android.com/security/overview/app-security" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">App Security</span></a></li>

  <li class="devsite-nav-item"><a href="https://source.android.com/security/overview/implement" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Implementing Security</span></a></li>

  <li class="devsite-nav-item"><a href="https://source.android.com/security/overview/updates-resources" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Updates and Resources</span></a></li>

  <li class="devsite-nav-item"><a href="https://source.android.com/security/overview/reports" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Reports</span></a></li>

  <li class="devsite-nav-item
           devsite-nav-expandable"><devsite-expandable-nav collapsed="" connected="" animatable="">
    <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button" aria-expanded="false"><span class="devsite-nav-text" tooltip="">Enhancements</span></div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="https://source.android.com/security/enhancements" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Overview</span></a></li><li class="devsite-nav-item"><a href="https://source.android.com/security/enhancements/enhancements10" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Android 10</span></a></li><li class="devsite-nav-item"><a href="https://source.android.com/security/enhancements/enhancements9" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Android 9</span></a></li><li class="devsite-nav-item"><a href="https://source.android.com/security/enhancements/enhancements80" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Android 8.0</span></a></li><li class="devsite-nav-item"><a href="https://source.android.com/security/enhancements/enhancements70" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Android 7.0</span></a></li><li class="devsite-nav-item"><a href="https://source.android.com/security/enhancements/enhancements60" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Android 6.0</span></a></li><li class="devsite-nav-item"><a href="https://source.android.com/security/enhancements/enhancements50" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Android 5.0</span></a></li><li class="devsite-nav-item"><a href="https://source.android.com/security/enhancements/enhancements44" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Android 4.4</span></a></li><li class="devsite-nav-item"><a href="https://source.android.com/security/enhancements/enhancements43" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Android 4.3</span></a></li><li class="devsite-nav-item"><a href="https://source.android.com/security/enhancements/enhancements42" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Android 4.2</span></a></li><li class="devsite-nav-item"><a href="https://source.android.com/security/enhancements/enhancements41" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Android 4.1</span></a></li></ul></devsite-expandable-nav></li>

  <li class="devsite-nav-item
           devsite-nav-expandable"><devsite-expandable-nav connected="">
    <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button" aria-expanded="true"><span class="devsite-nav-text" tooltip="">Acknowledgements</span></div><ul class="devsite-nav-section" style=""><li class="devsite-nav-item"><a href="https://source.android.com/security/overview/acknowledgements" class="devsite-nav-title"><span class="devsite-nav-text" tooltip="">Acknowledgements</span></a></li><li class="devsite-nav-item"><a href="https://source.android.com/security/overview/release-acknowledgements" class="devsite-nav-title devsite-nav-active"><span class="devsite-nav-text" tooltip="">Release Acknowledgements</span></a></li></ul></devsite-expandable-nav></li>
          </ul>
        
        
      </div>
    
  </div>
</nav>
        
      </devsite-book-nav>
      <section id="gc-wrapper" style="margin-top: 156px;">
        <main role="main" class="devsite-main-content" has-book-nav="" has-toc="">
          <devsite-toc class="devsite-nav devsite-toc" visible="" fixed="" max-height="1105" offset="10"><ul class="devsite-nav-list" role="navigation" aria-label="Table of contents" scrollbars="" style="max-height: 1105px; transform: translate3d(0px, -10px, 0px); max-width: 756px;"><li class="devsite-nav-item devsite-nav-heading devsite-toc-toggle" role="heading" aria-level="2"><a href="#top_of_page" class="devsite-nav-title" aria-label="Top of page" data-title="Top of page"><span class="devsite-nav-text">Table of contents</span></a></li><li class="devsite-nav-item"><a href="#android-11" class="devsite-nav-title gc-analytics-event devsite-nav-active" data-category="Site-Wide Custom Events" data-action="click" data-label="Right nav" data-value="0" track-type="navigation" track-name="rightNav" track-metadata-position="0" track-metadata-link-destination="#android-11"><span class="devsite-nav-text" tooltip="">Android 11   Security Release Notes</span></a></li><li class="devsite-nav-item"><a href="#android-10" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-action="click" data-label="Right nav" data-value="1" track-type="navigation" track-name="rightNav" track-metadata-position="1" track-metadata-link-destination="#android-10"><span class="devsite-nav-text" tooltip="">Android 10 Security Release Notes</span></a></li></ul></devsite-toc>
          <devsite-content>
            
              
<article class="devsite-article">
  
  
    <div class="devsite-banner devsite-banner-announcement">
      <div class="devsite-banner-message">
        <div class="devsite-banner-message-text">
          <style>
  .devsite-banner-announcement:not(.devsite-banner-tenant) {
    background: #202124;
    color: white;
    font-weight: 500;
  }
  .devsite-banner-announcement a {
    color: white;
    font-weight: 700;
  }
  .devsite-banner-announcement a:link,
  .devsite-banner-announcement a:visited {
    background: 0;
  }
  .devsite-banner-announcement a:hover,
  .devsite-banner-announcement a:focus {
    text-decoration: none;
  }
  .devsite-banner-announcement .devsite-banner-message-text {
    margin: 0 auto;
  }
</style> Google is committed to advancing racial equity for Black communities. <a href="https://google.com/racialequity" class="gc-analytics-event" data-category="Announcement" data-label="Racial Equity">See how.</a>

        </div>
      </div>
    </div>
  
  
  <div class="devsite-article-meta" role="navigation">
    
    
    <ul class="devsite-breadcrumb-list" aria-label="Breadcrumb">
  
  <li class="devsite-breadcrumb-item
             ">
    
    
  <a href="https://source.android.com/" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="1" track-type="globalNav" track-name="breadcrumb" track-metadata-position="1" track-metadata-eventdetail="Android Open Source Project">
    
        AOSP
      
  </a>
  
    
  </li>
  
  <li class="devsite-breadcrumb-item
             ">
    
      
      <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div>
    
    
  <a href="https://source.android.com/security" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="2" track-type="globalNav" track-name="breadcrumb" track-metadata-position="2" track-metadata-eventdetail="">
    
        Secure
      
  </a>
  
    
  </li>
  
</ul>
    
      
    <devsite-page-rating position="header" selected-rating="0" hover-rating-star="0">
    <div class="devsite-rating-stars" role="form" tabindex="0" aria-label="Rate this page"><div class="devsite-rating-star devsite-rating-star-outline gc-analytics-event material-icons" data-rating-val="1" track-metadata-score="1" track-type="feedback" track-name="rating" track-metadata-position="header" role="checkbox" tabindex="0" data-title="Unusable documentation" aria-label="Unusable documentation, with a rating of 1 out of 5" aria-checked="false"></div><div class="devsite-rating-star devsite-rating-star-outline gc-analytics-event material-icons" data-rating-val="2" track-metadata-score="2" track-type="feedback" track-name="rating" track-metadata-position="header" role="checkbox" tabindex="0" data-title="Poor documentation" aria-label="Poor documentation, with a rating of 2 out of 5" aria-checked="false"></div><div class="devsite-rating-star devsite-rating-star-outline gc-analytics-event material-icons" data-rating-val="3" track-metadata-score="3" track-type="feedback" track-name="rating" track-metadata-position="header" role="checkbox" tabindex="0" data-title="OK documentation" aria-label="OK documentation, with a rating of 3 out of 5" aria-checked="false"></div><div class="devsite-rating-star devsite-rating-star-outline gc-analytics-event material-icons" data-rating-val="4" track-metadata-score="4" track-type="feedback" track-name="rating" track-metadata-position="header" role="checkbox" tabindex="0" data-title="Good documentation" aria-label="Good documentation, with a rating of 4 out of 5" aria-checked="false"></div><div class="devsite-rating-star devsite-rating-star-outline gc-analytics-event material-icons" data-rating-val="5" track-metadata-score="5" track-type="feedback" track-name="rating" track-metadata-position="header" role="checkbox" tabindex="0" data-title="Excellent documentation" aria-label="Excellent documentation, with a rating of 5 out of 5" aria-checked="false"></div></div></devsite-page-rating>
  
    
  </div>
  
  
    <h1 class="devsite-page-title">Android Release Security Acknowledgements</h1>
  

  <devsite-toc class="devsite-nav devsite-toc-embedded" devsite-toc-embedded="" visible=""><ul class="devsite-nav-list" role="navigation" aria-label="Table of contents" scrollbars=""><li class="devsite-nav-item devsite-nav-heading devsite-toc-toggle" role="heading" aria-level="2"><a href="#top_of_page" class="devsite-nav-title" aria-label="Top of page" data-title="Top of page"><span class="devsite-nav-text">Table of contents</span></a><button type="button" title="Expand/collapse contents" class="devsite-nav-show-all button-transparent material-icons"></button></li><li class="devsite-nav-item" visible=""><a href="#android-11" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-action="click" data-label="Embedded nav" data-value="0" track-type="navigation" track-name="embeddedNav" track-metadata-position="0" track-metadata-link-destination="#android-11"><span class="devsite-nav-text" tooltip="">Android 11   Security Release Notes</span></a></li><li class="devsite-nav-item" visible=""><a href="#android-10" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-action="click" data-label="Embedded nav" data-value="1" track-type="navigation" track-name="embeddedNav" track-metadata-position="1" track-metadata-link-destination="#android-10"><span class="devsite-nav-text" tooltip="">Android 10 Security Release Notes</span></a></li><li class="devsite-toc-toggle"><button type="button" class="button-flat devsite-nav-more-items material-icons" track-type="navigation" track-name="embeddedNavExpand" title="Expand/collapse contents" aria-hidden="true"></button></li></ul></devsite-toc>

  <div class="devsite-article-body clearfix
    ">

    
  <!--
      Copyright 2020 The Android Open Source Project

      Licensed under the Apache License, Version 2.0 (the "License");
      you may not use this file except in compliance with the License.
      You may obtain a copy of the License at

          http://www.apache.org/licenses/LICENSE-2.0

      Unless required by applicable law or agreed to in writing, software
      distributed under the License is distributed on an "AS IS" BASIS,
      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
      See the License for the specific language governing permissions and
      limitations under the License.
  -->

<h2 id="android-11" data-text="Android 11   Security Release Notes">Android 11
  Security Release Notes</h2>

<div class="devsite-table-wrapper"><table>
<thead>
<tr>
<th>Researchers</th>
<th>CVEs</th>
</tr>
</thead>
<tbody>
<tr>
<td>A.V. Flox and Yonatan Zunger</td>
<td>CVE-2020-0286</td>
</tr>
<tr>
<td>Alexandru Bogdan Geana</td>
<td>CVE-2020-0369</td>
</tr>
<tr>
<td><a href="https://twitter.com/_pox_/">Andrea Possemato</a> of <a href="https://idemia.com/">IDEMIA</a></td>
<td>CVE-2020-0317, CVE-2020-0327, CVE-2020-0343, CVE-2020-0372 </td>
</tr>
<tr>
<td>Android Security Red Team</td>
<td>CVE-2020-0281, CVE-2020-0300, CVE-2020-0319, CVE-2020-0325, CVE-2020-0326,
CVE-2020-0334, CVE-2020-0350</td>
</tr>
<tr>
<td>Bruce Chen of Google</td>
<td>CVE-2020-0365</td>
</tr>
<tr>
<td>Calum Hutton (Perspective Risk)</td>
<td>CVE-2020-0352</td>
</tr>
<tr>
<td>Gengjia Chen (<a href="https://twitter.com/chengjia4574">@chengjia4574</a>) of IceSword
Lab, Qihoo 360 Technology Co. Ltd.</td>
<td>CVE-2020-0335, CVE-2020-0348, CVE-2020-0349</td>
</tr>
<tr>
<td>Chi Zhang and Guang Gong (<a href="https://twitter.com/oldfresher">@oldfresher</a>) of 360 Alpha Lab
working with 360 BugCloud (<a href="https://bugcloud.360.cn/">https://bugcloud.360.cn/</a>)</td>
<td>CVE-2020-0341, CVE-2020-0354</td>
</tr>
<tr>
<td>Chong Wang (王冲) (<a href="https://weibo.com/csddl">weibo.com/csddl</a>) from Chengdu
Security Response Center of Qihoo 360 Technology Co. Ltd.</td>
<td>CVE-2020-0264, CVE-2020-0322, CVE-2020-0323</td>
</tr>
<tr>
<td>Cusas @ L.O. Team</td>
<td>CVE-2020-0266, CVE-2020-0301, CVE-2020-0320, CVE-2020-0332, CVE-2020-0351,
CVE-2020-0353 CVE-2020-0362</td>
</tr>
<tr>
<td>Cyrille Chatras of Orange Labs</td>
<td>CVE-2020-0130</td>
</tr>
<tr>
<td><a href="https://www.weibo.com/lietdai?is_all=1">Dai</a> of L.O.
Team</td>
<td>CVE-2020-0287</td>
</tr>
<tr>
<td>Daoyuan Wu of The Chinese University of Hong Kong</td>
<td>CVE-2020-0308, CVE-2020-0374</td>
</tr>
<tr>
<td><a href="https://www.linkedin.com/in/dzima">Dzmitry
Lukyanenka</a></td>
<td>CVE-2020-0337, CVE-2020-0338</td>
</tr>
<tr>
<td>Edward Cunningham of Google</td>
<td>CVE-2020-0263, CVE-2020-0275, CVE-2020-0294, CVE-2020-0313,
CVE-2020-0426</td>
</tr>
<tr>
<td><a href="https://twitter.com/heeeeen4x">En He</a> of OPPO ZIWU Cyber
Security Lab</td>
<td>CVE-2020-0331, CVE-2020-0405</td>
</tr>
<tr>
<td>Evgenii Stepanov of Google</td>
<td>CVE-2020-0268, CVE-2020-0330</td>
</tr>
<tr>
<td>Hamzeh Zawawy of Google</td>
<td>CVE-2020-0291</td>
</tr>
<tr>
<td>Hao Liu and Jianqiang Zhao of IceSword Lab, Qihoo 360</td>
<td>CVE-2020-0282</td>
</tr>
<tr>
<td>Hongli Han (<a href="https://twitter.com/hexb1n">@hexb1n</a>) and
Guang Gong (<a href="https://twitter.com/oldfresher">@oldfresher</a>) of 360 Alpha Lab
working with 360 BugCloud (<a href="https://bugcloud.360.cn/">https://bugcloud.360.cn/</a>)</td>
<td>CVE-2020-0273, CVE-2020-0357, CVE-2020-0358</td>
</tr>
<tr>
<td>Ilja van Sprundel of IOActive</td>
<td>CVE-2020-0328</td>
</tr>
<tr>
<td>Jeff Vander Stoep of Google</td>
<td>CVE-2020-0293</td>
</tr>
<tr>
<td>Joshua Steiner</td>
<td>CVE-2020-0366</td>
</tr>
<tr>
<td>Kostya Serebryany of Google using libFuzzer and AddressSanitizer</td>
<td>CVE-2020-0279</td>
</tr>
<tr>
<td>Lorne Laliberte (mailto:lorne.laliberte@gmail.com, <a href="https://twitter.com/creativekind">@creativekind</a>)</td>
<td>CVE-2020-0333</td>
</tr>
<tr>
<td>Matthew Daley</td>
<td>CVE-2020-0265, CVE-2020-0277, CVE-2020-0288, CVE-2020-0289, CVE-2020-0290,
CVE-2020-0298, CVE-2020-0299, CVE-2020-0360</td>
</tr>
<tr>
<td>Miao Hu and Yufei Liu of KeenLab (<a href="https://twitter.com/keen_lab">@keen_lab</a>), Tencent</td>
<td>CVE-2020-0276, CVE-2020-0284, CVE-2020-0285, CVE-2020-0314, CVE-2020-0316,
  CVE-2020-0375</td>
</tr>
<tr>
<td>Michal Bednarski (<a href="https://github.com/michalbednarski">https://github.com/michalbednarski</a>)</td>
<td>CVE-2020-0344, CVE-2020-0345, CVE-2020-27097, CVE-2020-27098</td>
</tr>
<tr>
<td>Mingjian Zhou (周明建) (<a href="https://twitter.com/Mingjian_Zhou">@Mingjian_Zhou</a>) of <a href="http://c0reteam.org/">C0RE Team</a></td>
<td>CVE-2020-0329</td>
</tr>
<tr>
<td>Niky(kittymore83@gmail.com) of China Mobile</td>
<td>CVE-2019-8842</td>
</tr>
<tr>
<td>Pedro Umbelino, Security Researcher at Checkmarx</td>
<td>CVE-2020-0089</td>
</tr>
<tr>
<td>Qi Zhao (<a href="https://twitter.com/JHyrathon">@JHyrathon</a>) and
Guang Gong (<a href="https://twitter.com/oldfresher">@oldfresher</a>) of Alpha Lab,
Qihoo 360 Technology Co. Ltd.</td>
<td>CVE-2020-0272</td>
</tr>
<tr>
<td>Qilin Wang（王麒麟）,Jiawei Qin(秦佳伟) of Gtensor Team, Cyber Security Center,
State Key Laboratory of Network and Switching Technology, Beijing
University of Posts and Telecommunications（北京邮电大学网络与交换技术国家重点实验室) and
Tengfei Tu(涂腾飞) of Zhongshi Ruian Beijing Network Technology Co.,
Ltd (中时瑞安（北京）网络科技有限责任公司)</td>
<td>CVE-2020-0363</td>
</tr>
<tr>
<td><a href="https://github.com/stze">Stephan Zeisberg</a> of <a href="https://srlabs.de/">Security Research Labs</a></td>
<td>CVE-2020-3898</td>
</tr>
<tr>
<td>tomz</td>
<td>CVE-2020-0271</td>
</tr>
<tr>
<td>V.E.O. (<a href="https://twitter.com/VYSEa">@VYSEa</a>) (一〇) of Ant
Financial</td>
<td>CVE-2020-0292</td>
</tr>
<tr>
<td>Will Coster of Google</td>
<td>CVE-2020-0356</td>
</tr>
<tr>
<td>Xiaobo Xiang and Guang Gong of Alpha Lab, Qihoo 360 Technology Co. Ltd</td>
<td>CVE-2020-0309, CVE-2020-0347, CVE-2020-0359</td>
</tr>
<tr>
<td>Yong Wang (王勇) (<a href="https://twitter.com/ThomasKing2014">@ThomasKing2014</a>) of
Alibaba Security</td>
<td>CVE-2020-0274</td>
</tr>
<tr>
<td>Yury Shabalin (<a href="https://twitter.com/Mr_R1p">@Mr_R1p</a>),
Evgeniy Blashko (<a href="https://twitter.com/jd7drw">@jd7drw</a>) of Stingray LLC (https://stingray-mobile.ru/)</td>
<td>CVE-2020-0267</td>
</tr>
<tr>
<td>Zinuo Han (<a href="https://source.android.com/security/overview/weibo.com/ele7enxxh">weibo.com/ele7enxxh</a>) of
Alibaba Cloud Security Team</td>
<td>CVE-2020-0125, CVE-2020-0303, CVE-2020-0324, CVE-2020-0336, CVE-2020-0346,
CVE-2020-0364,   CVE-2020-0370, CVE-2020-0373</td>
</tr>
</tbody>
</table></div>

<h2 id="android-10" data-text="Android 10 Security Release Notes">Android 10 Security Release Notes</h2>

<div class="devsite-table-wrapper"><table>
<colgroup><col width="85%">
<col width="15%">
</colgroup><tbody><tr>
<th>Researchers</th>
<th>CVEs</th>
</tr>
<tr>
<td>Aditya Narkar, Joydeep Mitra, and Venkatesh-Prasad Ranganath as part
of Ghera project at Kansas State University, USA</td>
<td>CVE-2019-9463</td>
</tr>
<tr>
<td>Adrian Roos of Google</td>
<td>CVE-2019-9280</td>
</tr>
<tr>
<td>Aman Pandey, Student of Maulana Azad National Institute of Technology
Bhopal, M.P, India</td>
<td>CVE-2019-9407</td>
</tr>
<tr>
<td>Andrea Possemato (<a href="https://twitter.com/_pox_">@_pox_</a>) of
IDEMIA / EURECOM and Yanick Fratantonio ( <a href="https://twitter.com/reyammer/">@reyammer</a>) of EURECOM</td>
<td>CVE-2019-9292</td>
</tr>
<tr>
<td>Baozeng Ding (<a href="https://twitter.com/sploving1">@sploving</a>)
</td>
<td>CVE-2019-10528</td>
</tr>
<tr>
  <td>Baozheng Liu (<a href="https://twitter.com/uromise">@iromise</a>)
    of Tsinghua University, research intern at Alpha Lab and Guang Gong
    (<a href="https://twitter.com/oldfresher">@oldfresher</a>) of Alpha Lab,
    Qihoo 360 Technology Co. Ltd.</td>
<td>CVE-2019-2088</td>
</tr>
<tr>
<td><a href="mailto:zc1991@mail.ustc.edu.cn">Chi Zhang</a> and Mingjian
Zhou (周明建) (<a href="https://twitter.com/Mingjian_Zhou">@Mingjian_Zhou</a>) of <a href="http://c0reteam.org/">C0RE Team</a></td>
<td>CVE-2019-9237, CVE-2019-9241, CVE-2019-9363</td>
</tr>
<tr>
<td>Chirayu Desai of The Calyx Institute</td>
<td>CVE-2019-9436 </td>
</tr>
<tr>
<td>Chong Wang (王冲) (<a href="https://weibo.com/csddl">weibo.com/csddl</a>) from
Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd.</td>
<td>CVE-2019-2060,
CVE-2019-2146,
CVE-2019-2156,
CVE-2019-2162,
CVE-2019-9234,
CVE-2019-9243,
CVE-2019-9249,
CVE-2019-9250,
CVE-2019-9289,
CVE-2019-9312,
CVE-2019-9329,
CVE-2019-9409</td>
</tr>
<tr>
<td>Chong Wang (王冲) (<a href="https://weibo.com/csddl">weibo.com/csddl</a>) and
Zhe Jin (金哲) from Chengdu Security Response Center of Qihoo 360
Technology Co. Ltd.</td>
<td>CVE-2019-2140,
CVE-2019-2141,
CVE-2019-2147,
CVE-2019-2159,
CVE-2019-2163,
CVE-2019-2166,
CVE-2019-9251,
CVE-2019-9287,
CVE-2019-9293,
CVE-2019-9318,
CVE-2019-9332,
CVE-2019-9334,
CVE-2019-9355,
CVE-2019-9356,
CVE-2019-9359,
CVE-2019-9366,
CVE-2019-9368,
CVE-2019-9462,
CVE-2019-9383,
CVE-2019-9406,
CVE-2019-9415,
CVE-2019-9416,
CVE-2019-9427,
CVE-2019-9432,
CVE-2019-9434</td>
</tr>
<tr>
<td>Christopher Dombroski of Deja vu Security</td>
<td>CVE-2019-9268</td>
</tr>
<tr>
<td>Christopher Tate of Google</td>
<td>CVE-2019-9373</td>
</tr>
<tr>
<td><a href="http://c0reteam.org/">C0RE Team</a></td>
<td>CVE-2018-11893,
CVE-2019-2341</td>
</tr>
<tr>
<td>crixer</td>
<td>CVE-2019-9444</td>
</tr>
<tr>
<td>Cusas @ L.O. Team</td>
<td>CVE-2019-9346,
CVE-2019-9348,
CVE-2019-9349,
CVE-2019-9352,
CVE-2019-9379,
CVE-2020-0088</td>
</tr>
<tr>
<td><a href="mailto:d2yp.me@gmail.com">D2.Y.P</a></td>
<td>CVE-2019-2061,
CVE-2019-2080,
CVE-2019-2087,
CVE-2019-2138,
CVE-2019-2144,
CVE-2019-2145,
CVE-2019-2153,
CVE-2019-2154,
CVE-2019-2155,
CVE-2019-2157,
CVE-2019-2160,
CVE-2019-2161,
CVE-2019-2165,
CVE-2019-2171,
CVE-2019-2172,
CVE-2019-9233,
CVE-2019-9314,
CVE-2019-9335,
CVE-2019-9403,
CVE-2019-9408</td>
</tr>
<tr>
<td><a href="mailto:shaodacheng2016@gmail.com">Dacheng Shao</a> and
Mingjian Zhou (周明建) (<a href="https://twitter.com/Mingjian_Zhou">@Mingjian_Zhou</a>) of <a href="http://c0reteam.org/">C0RE Team</a></td>
<td>CVE-2018-11929, CVE-2019-9445 </td>
</tr>
<tr>
<td>Daxing Guo of Tencent Security Xuanwu Lab</td>
<td>CVE-2019-10497</td>
</tr>
<tr>
<td>derrek (<a href="https://twitter.com/derrekr6">@derrekr6</a>)</td>
<td>CVE-2018-3573,
CVE-2018-5861,
CVE-2018-11985</td>
</tr>
<tr>
<td>Di Shen (<a href="https://twitter.com/returnsme">@returnsme</a>) of
KeenLab (<a href="https://twitter.com/keen_lab">@keen_lab</a>),
Tencent</td>
<td>CVE-2019-2298</td>
</tr>
<tr>
<td>Dokyung Song, Dipanjan Das, and Felicitas Hetzelt</td>
<td>CVE-2018-11947</td>
</tr>
<tr>
<td><a href="https://www.linkedin.com/in/dzima">Dzmitry
Lukyanenka</a></td>
<td>CVE-2019-9440</td>
</tr>
<tr>
<td>Efthimios Alepis and Constantinos Patsakis, Department of
Informatics, University of Piraeus, Greece</td>
<td>CVE-2019-9323</td>
</tr>
<tr>
<td>Elphet and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd.
</td>
<td>CVE-2019-2063,
CVE-2019-2064,
CVE-2019-2065,
CVE-2019-2066,
CVE-2019-2067,
CVE-2019-2068,
CVE-2019-2069,
CVE-2019-2070,
CVE-2019-2071,
CVE-2019-2072,
CVE-2019-2073,
CVE-2019-2074,
CVE-2019-2075,
CVE-2019-2076,
CVE-2019-2077,
CVE-2019-2078,
CVE-2019-2079,
CVE-2019-2086,
CVE-2019-9288</td>
</tr>
<tr>
<td>En He (<a href="https://twitter.com/heeeeen4x">@heeeeen4x</a>) of
OPPO ZIWU Cyber Security Lab</td>
<td>CVE-2019-9311</td>
</tr>
<tr>
<td>Evgenii Stepanov of Google</td>
<td>CVE-2019-9350</td>
</tr>
<tr>
<td>Felix Kirchengast and Raphael Spreitzer of Graz University of
Technology</td>
<td>CVE-2019-9277</td>
</tr>
<tr>
<td>Gengjia Chen (<a href="https://twitter.com/chengjia4574">@chengjia4574</a>) of IceSword
Lab, Qihoo 360 Technology Co. Ltd.</td>
<td>CVE-2018-11825,
CVE-2018-13890,
CVE-2019-2299,
CVE-2019-2302,
CVE-2019-2312,
CVE-2019-2314,
CVE-2019-2314,
CVE-2019-9248,
CVE-2019-9386,
CVE-2019-9448,
CVE-2019-9449,
CVE-2019-9450,
CVE-2019-9451,
CVE-2019-9452,
CVE-2019-10506</td>
</tr>
<tr>
<td>Gengjia Chen (<a href="https://twitter.com/chengjia4574">@chengjia4574</a>), pjf (<a href="https://weibo.com/jfpan">weibo.com/jfpan</a>) of IceSword Lab, Qihoo 360
Technology Co. Ltd.</td>
<td>CVE-2017-14888,
CVE-2018-11302,
CVE-2019-10542</td>
</tr>
<tr>
<td>Greg Hartman of Google</td>
<td>CVE-2019-9429</td>
</tr>
<tr>
<td>Gulshan Singh</td>
<td>CVE-2019-2281</td>
</tr>
<tr>
<td>Hamzeh Zawawy of Google</td>
<td>CVE-2019-9454</td>
</tr>
<tr>
<td><a href="mailto:arnow117@gmail.com">Hanxiang Wen</a> and Mingjian
Zhou (周明建) (<a href="https://twitter.com/Mingjian_Zhou">@Mingjian_Zhou</a>)
of <a href="http://c0reteam.org/">C0RE Team</a></td>
<td>CVE-2019-9245</td>
</tr>
<tr>
<td>Hao Chen (<a href="https://twitter.com/flankersky">@flankersky</a>)
and Guang Gong (<a href="https://twitter.com/oldfresher">@oldfresher</a>) of Alpha Team,
Qihoo 360 Technology Co. Ltd.</td>
<td>CVE-2018-3574,
CVE-2018-11939,
CVE-2019-2263,
CVE-2019-2277,
CVE-2019-2345
</td>
</tr>
<tr>
<td>Hao Liu and Jianqiang Zhao of IceSword Lab, Qihoo 360</td>
<td>CVE-2019-9375</td>
</tr>
<tr>
<td>heidada</td>
<td>CVE-2019-2248</td>
</tr>
<tr>
<td>Hongli Han (<a href="https://twitter.com/hexb1n">@hexb1n</a>) and
Mingjian Zhou (周明建) (<a href="https://twitter.com/Mingjian_Zhou">@Mingjian_Zhou</a>) of <a href="http://c0reteam.org/">C0RE Team</a></td>
<td>CVE-2019-9347</td>
</tr>
  <tr>
    <td>Huinian Yang (杨卉年) (<a href="https://twitter.com/vmth6">@vmth6</a>)
      and Chong Wang (王冲) (<a href="https://weibo.com/csddl" class="external">weibo.com/csddl</a>) of Chengdu Security Response
      Center, Qihoo 360 Technology Co. Ltd.</td>
    <td>CVE-2019-2058</td>
  </tr>
<tr>
<td>Ivan Lozano of Google</td>
<td>CVE-2019-9420</td>
</tr>
<tr>
<td>Janis Danisevskis of Google</td>
<td>CVE-2019-9253</td>
</tr>
<tr>
<td>Jeff Davidson of Google</td>
<td>CVE-2019-9263,
CVE-2018-9425</td>
</tr>
<tr>
<td>Jianjun Dai (<a href="https://twitter.com/jioun_dai" class="external">@jioun_dai</a>) and Guang Gong
(<a href="https://twitter.com/oldfresher" class="external">@oldfresher</a>) of 360 Alpha Team</td>
<td>CVE-2019-9402,
  CVE-2019-9401,
  CVE-2019-9398,
  CVE-2019-9396,
  CVE-2019-9397,
  CVE-2019-9473</td>
</tr>
<tr>
<td>Jianqiang Zhao (<a href="https://twitter.com/jianqiangzhao?lang=en">@jianqiangzhao</a>)
and pjf (<a href="https://weibo.com/jfpan">weibo.com/jfpan</a>) of IceSword
Lab, Qihoo 360</td>
<td>CVE-2018-11823,
CVE-2018-11832,
CVE-2018-11987,
CVE-2018-11988,
CVE-2019-2333,
CVE-2019-9271,
CVE-2019-9443,
CVE-2019-9446,
CVE-2019-9447,
CVE-2019-9456,
CVE-2019-10507</td>
</tr>
<tr>
<td>João Lucas Melo Brasio of <a href="https://www.elytronsecurity.com/">Elytron Security S.A.</a></td>
<td>CVE-2019-9428</td>
</tr>
<tr>
<td>Julien Thomas (<a href="https://twitter.com/julien_thomas">@Julien_Thomas</a>)</td>
<td>CVE-2019-9269</td>
</tr>
<tr>
<td>Kah Hin Lai of University of Minnesota</td>
<td>CVE-2019-9380</td>
</tr>
<tr>
<td>kimyok of Tongdun Technology</td>
<td>CVE-2019-9281</td>
</tr>
<tr>
<td>Kostya Serebryany of Google, using libFuzzer+AddressSanitizer</td>
<td>CVE-2019-2108</td>
</tr>
<tr>
<td>Krystian Kieczka et al. of Samsung Poland Mobile Security</td>
<td>CVE-2019-9376</td>
</tr>
<tr>
<td>Martijn Bogaard</td>
<td>CVE-2019-2343</td>
</tr>
<tr>
<td>Martin Brabham of Google</td>
<td>CVE-2019-9265</td>
</tr>
<tr>
<td><a href="mailto:masashi.honma@gmail.com">Masashi Honma</a>,
Hiroyuki Harada (<a href="https://twitter.com/pirosap">@pirosap</a>), and
<a href="mailto:hgot@cc.tohoku.ac.jp">Hideaki Goto</a></td>
<td>CVE-2019-9279</td>
</tr>
<tr>
<td>Mike Davis</td>
<td>CVE-2019-9270</td>
</tr>
<tr>
<td>Mingjian Zhou (周明建) (<a href="https://twitter.com/Mingjian_Zhou">@Mingjian_Zhou</a>) of <a href="http://c0reteam.org/">C0RE Team</a></td>
<td>CVE-2019-2306</td>
</tr>
<tr>
<td>Mitch Phillips of Google</td>
<td>CVE-2019-9370</td>
</tr>
<tr>
<td>Moony Li and Todd Han of TrendMicro Research working
with Trend Micro´s Zero Day Initiative</td>
<td>CVE-2019-9353</td>
</tr>
<tr>
<td>Nightwatch Cybersecurity Research</td>
<td>CVE-2018-9489,
CVE-2019-9581</td>
</tr>
<tr>
<td>Niky1235 (<a href="https://twitter.com/jiych_guru">@jiych_guru</a>)</td>
<td>CVE-2019-9290,
CVE-2019-9294,
CVE-2019-9459</td>
</tr>
<tr>
<td>Paul Bandha</td>
<td>CVE-2019-9453</td>
</tr>
<tr>
<td>Pedro Umbelino, Security Researcher at Checkmarx</td>
<td>CVE-2019-9295</td>
</tr>
<tr>
<td>Pengfei Ding (丁鹏飞) of Huawei</td>
<td>CVE-2019-2284,
CVE-2019-9327,
CVE-2019-9328,
CVE-2019-9331,
CVE-2019-9343,
CVE-2019-9367,
CVE-2019-9442,
CVE-2019-9455,
CVE-2019-9458,
CVE-2019-10502</td>
</tr>
<tr>
<td>Pengfei Ding (丁鹏飞), Chenfu Bao (包沉浮), and Lenx Wei
(韦韬) of Baidu X-Lab (百度安全实验室)</td>
<td>CVE-2018-11818</td>
</tr>
<tr>
<td>Peter Pi of Tencent Blade Team</td>
<td>CVE-2018-12006,
CVE-2018-12011, CVE-2019-9275</td>
</tr>
<tr>
<td>Qi Zhao (<a href="https://twitter.com/JHyrathon">@JHyrathon</a>) and
Guang Gong (<a href="https://twitter.com/oldfresher">@oldfresher</a>) of Alpha Team,
Qihoo 360 Technology Co. Ltd.</td>
<td>CVE-2019-9358</td>
</tr>
<tr>
<td>Ray Essick of Google</td>
<td>CVE-2019-9385</td>
</tr>
<tr>
<td><a href="https://linkedin.com/in/raywdude">Raymond Wang</a></td>
<td>CVE-2019-9381</td>
</tr>
<tr>
<td>Roman Kümmel aka .cCuMiNn. (<a href="https://www.soom.cz/" class="external">www.soom.cz</a>)</td>
<td>CVE-2019-2089</td>
</tr>
<tr>
<td>Rong Fan (<a href="https://github.com/fanrong1992" class="external">fanrong1992</a>) and Simon Huang (<a href="https://twitter.com/huangshaomang" class="external">@HuangShaomang</a>) of
IceSword Lab, Qihoo 360</td>
<td>CVE-2019-2139</td>
</tr>
<tr>
<td>Ryan Haining of Google</td>
<td>CVE-2019-9266</td>
</tr>
<tr>
<td><a href="https://twitter.com/Scottybauer1">Scott Bauer</a></td>
<td>CVE-2019-9296</td>
</tr>
<tr>
<td>Sigmund Albert Gorski III, Benjamin Andow, and William Enck of North
Carolina State University; Sunil Manandhar and Adwait Nadkarni of William &amp;
Mary</td>
<td>CVE-2019-9351,
CVE-2019-9377,
CVE-2019-9438</td>
</tr>
<tr>
<td><a href="https://github.com/stze">Stephan Zeisberg</a> of <a href="https://srlabs.de/">Security Research Labs</a></td>
<td>CVE-2019-9418</td>
</tr>
  <tr>
    <td>Steven Moreland of Google</td>
    <td>CVE-2020-0086</td>
  </tr>
<tr>
<td>William J. Tolley and Jedidiah R. Crandall, Breakpointing Bad</td>
<td>CVE-2019-9461</td>
</tr>
<tr>
<td>Xiangyu Fan of Huawei Terminal Security Test Team</td>
<td>CVE-2019-9426</td>
</tr>
<tr>
<td>Xuan Xing of Google</td>
<td>CVE-2017-15844,
CVE-2018-11943,
CVE-2019-9238,
CVE-2019-9239,
CVE-2019-9240,
CVE-2019-9244</td>
</tr>
<tr>
<td><a href="mailto:huahuaisadog@gmail.com">Yang Dai</a></td>
<td>CVE-2019-9273,
CVE-2018-13912</td>
</tr>
<tr>
<td><a href="mailto:huahuaisadog@gmail.com">Yang Dai</a> and <a href="mailto:shanzhulig@gmail.com">Xiao Huang</a></td>
<td>CVE-2019-9276</td>
</tr>
<tr>
<td><a href="mailto:bigwyfone@gmail.com">YanFeng Wang</a>
and Mingjian Zhou (周明建) (<a href="https://twitter.com/Mingjian_Zhou" class="external">@Mingjian_Zhou</a>)
of <a href="http://c0reteam.org/" class="external">C0RE Team</a></td>
<td>CVE-2019-2182</td>
</tr>
<tr>
<td>Yonggang Guo (<a href="https://twitter.com/guoygang" class="external">@guoygang</a>) of IceSword Lab, Qihoo 360
Technology Co. Ltd.</td>
<td>CVE-2019-9441</td>
</tr>
<tr>
<td>Yongke Wang (王永科) (<a href="https://twitter.com/Rudykewang">@Rudykewang</a>) and Xiangqian
Zhang (张向前) (<a href="https://twitter.com/h3rb0x">@h3rb0x</a>) of
<a href="https://xlab.tencent.com/">Tencent Security Xuanwu Lab</a></td>
<td>CVE-2019-9284,
  CVE-2019-9285,
  CVE-2019-9286,
  CVE-2019-9291,
  CVE-2019-9309,
  CVE-2019-9326,
  CVE-2019-9330,
  CVE-2019-9341,
  CVE-2019-9342,
  CVE-2019-9354,
  CVE-2019-9413,
  CVE-2019-9417,
  CVE-2019-9419,
CVE-2019-9422</td>
</tr>
<tr>
<td><a href="mailto:frankzhyue@gmail.com">Yue Zhang</a> and <a href="mailto:chlql670@gmail.com">Qinglin Liu</a></td>
  <td>CVE-2019-9274</td>
</tr>
<tr>
<td><a href="mailto:sundaywind2004@gmail.com">Zhixin Li</a> of <a href="http://www.nsfocus.com/" class="exernal">NSFocus</a></td>
  <td>CVE-2019-2158</td>
</tr>
<tr>
  <td>Zhou Lingling of Xuebao Team, Tencent Mobile Security Lab</td>
  <td>CVE-2018-11919,
    CVE-2018-11983,
    CVE-2018-11984,
  CVE-2018-13893</td>
</tr>
<tr>
  <td>Zinuo Han (<a href="https://www.weibo.com/ele7enxxh">weibo.com/ele7enxxh</a>)</td>
    <td>CVE-2018-11899,
      CVE-2019-2055,
      CVE-2019-2059,
      CVE-2019-2062,
      CVE-2019-2081,
      CVE-2019-2082,
      CVE-2019-2083,
      CVE-2019-2084,
      CVE-2019-2085,
      CVE-2019-2142,
      CVE-2019-2143,
      CVE-2019-2148,
      CVE-2019-2149,
      CVE-2019-2150,
      CVE-2019-2151,
      CVE-2019-2152,
      CVE-2019-2164,
      CVE-2019-2167,
      CVE-2019-2168,
      CVE-2019-2169,
      CVE-2019-2170,
      CVE-2019-9242,
      CVE-2019-9246,
      CVE-2019-9247,
      CVE-2019-9313,
      CVE-2019-9315,
      CVE-2019-9316,
      CVE-2019-9317,
      CVE-2019-9319,
      CVE-2019-9320,
      CVE-2019-9321,
      CVE-2019-9322,
      CVE-2019-9333,
      CVE-2019-9336,
      CVE-2019-9337,
      CVE-2019-9338,
      CVE-2019-9344,
      CVE-2019-9361,
      CVE-2019-9362,
      CVE-2019-9365,
      CVE-2019-9369,
      CVE-2019-9400,
      CVE-2019-9404,
      CVE-2019-9410,
      CVE-2019-9411,
      CVE-2019-9412,
      CVE-2019-9421,
      CVE-2019-9430,
      CVE-2019-9431,
      CVE-2019-9435,
      CVE-2019-9474</td>
  </tr>
</tbody></table></div>

  
  </div>

  
    <devsite-page-rating position="footer" selected-rating="0" hover-rating-star="0">
    <div><div class="devsite-rating-caption">Was this page helpful?</div><div class="devsite-rating-stars" role="form" tabindex="0" aria-label="Rate this page"><div class="devsite-rating-star devsite-rating-star-outline gc-analytics-event material-icons" data-rating-val="1" track-metadata-score="1" track-type="feedback" track-name="rating" track-metadata-position="footer" role="checkbox" tabindex="0" data-title="Unusable documentation" aria-label="Unusable documentation, with a rating of 1 out of 5" aria-checked="false"></div><div class="devsite-rating-star devsite-rating-star-outline gc-analytics-event material-icons" data-rating-val="2" track-metadata-score="2" track-type="feedback" track-name="rating" track-metadata-position="footer" role="checkbox" tabindex="0" data-title="Poor documentation" aria-label="Poor documentation, with a rating of 2 out of 5" aria-checked="false"></div><div class="devsite-rating-star devsite-rating-star-outline gc-analytics-event material-icons" data-rating-val="3" track-metadata-score="3" track-type="feedback" track-name="rating" track-metadata-position="footer" role="checkbox" tabindex="0" data-title="OK documentation" aria-label="OK documentation, with a rating of 3 out of 5" aria-checked="false"></div><div class="devsite-rating-star devsite-rating-star-outline gc-analytics-event material-icons" data-rating-val="4" track-metadata-score="4" track-type="feedback" track-name="rating" track-metadata-position="footer" role="checkbox" tabindex="0" data-title="Good documentation" aria-label="Good documentation, with a rating of 4 out of 5" aria-checked="false"></div><div class="devsite-rating-star devsite-rating-star-outline gc-analytics-event material-icons" data-rating-val="5" track-metadata-score="5" track-type="feedback" track-name="rating" track-metadata-position="footer" role="checkbox" tabindex="0" data-title="Excellent documentation" aria-label="Excellent documentation, with a rating of 5 out of 5" aria-checked="false"></div></div></div></devsite-page-rating>
  
       
</article>


<devsite-content-footer class="nocontent">
  <p>Content and code samples on this page are subject to the licenses described in the <a href="https://source.android.com/license">Content License</a>. Java is a registered trademark of Oracle and/or its affiliates.</p>
  <p>Last updated 2021-01-01 UTC.</p>
</devsite-content-footer>


          </devsite-content>
        </main>
        <devsite-footer-promos class="devsite-footer">
          
            
        </devsite-footer-promos>
        <devsite-footer-linkboxes class="devsite-footer">
          
            
<nav class="devsite-footer-linkboxes nocontent" aria-label="Footer links">
  
  <ul class="devsite-footer-linkboxes-list">
    
    <li class="devsite-footer-linkbox ">
    <h3 class="devsite-footer-linkbox-heading no-link">Build</h3>
      <ul class="devsite-footer-linkbox-list">
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://android.googlesource.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)">
          
            Android repository
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://source.android.com/source/requirements" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)">
          
            Requirements
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://source.android.com/source/downloading" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)">
          
            Downloading
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://developers.google.com/android/blobs-preview/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)">
          
            Preview binaries
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://developers.google.com/android/images/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)">
          
            Factory images
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://developers.google.com/android/drivers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)">
          
            Driver binaries
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://android.github.io/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)">
          
            GitHub
          
          </a>
          
        </li>
        
      </ul>
    </li>
    
    <li class="devsite-footer-linkbox ">
    <h3 class="devsite-footer-linkbox-heading no-link">Connect</h3>
      <ul class="devsite-footer-linkbox-list">
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://twitter.com/Android/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)">
          
            @Android on Twitter
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://twitter.com/AndroidDev/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)">
          
            @AndroidDev on Twitter
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://blog.google/products/android/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)">
          
            Android Blog
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://security.googleblog.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)">
          
            Google Security Blog
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://groups.google.com/forum/?fromgroups#!forum/android-platform/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)">
          
            Platform on Google Groups
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://groups.google.com/forum/?fromgroups#!forum/android-building/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)">
          
            Building on Google Groups
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://groups.google.com/forum/?fromgroups#!forum/android-porting/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)">
          
            Porting on Google Groups
          
          </a>
          
        </li>
        
      </ul>
    </li>
    
    <li class="devsite-footer-linkbox ">
    <h3 class="devsite-footer-linkbox-heading no-link">Get help</h3>
      <ul class="devsite-footer-linkbox-list">
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://support.google.com/android/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)">
          
            Android Help Center
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://support.google.com/pixelphone/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)">
          
            Pixel Help Center
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://www.android.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)">
          
            www.android.com
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://www.android.com/gms/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)">
          
            Google Mobile Services
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://stackoverflow.com/questions/tagged/android-source/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)">
          
            Stack Overflow
          
          </a>
          
        </li>
        
        <li class="devsite-footer-linkbox-item">
          
          <a href="https://issuetracker.google.com/issues?q=status:open%20componentid:190923" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)">
          
            Issue Tracker
          
          </a>
          
        </li>
        
      </ul>
    </li>
    
  </ul>
  
</nav>
          
        </devsite-footer-linkboxes>
        <devsite-footer-utility class="devsite-footer">
          
            
<div class="devsite-footer-utility nocontent">
  

  <nav class="devsite-footer-utility-links" aria-label="Utility links">
    
    <ul class="devsite-footer-utility-list">
      
      <li class="devsite-footer-utility-item
                 ">
        
        
        <a class="devsite-footer-utility-link gc-analytics-event" href="https://source.android.com/source/" data-category="Site-Wide Custom Events" data-label="Footer About Android link">
          About Android
        </a>
        
      </li>
      
      <li class="devsite-footer-utility-item
                 ">
        
        
        <a class="devsite-footer-utility-link gc-analytics-event" href="https://source.android.com/source/community" data-category="Site-Wide Custom Events" data-label="Footer Community link">
          Community
        </a>
        
      </li>
      
      <li class="devsite-footer-utility-item
                 ">
        
        
        <a class="devsite-footer-utility-link gc-analytics-event" href="https://source.android.com/legal" data-category="Site-Wide Custom Events" data-label="Footer Legal link">
          Legal
        </a>
        
      </li>
      
      <li class="devsite-footer-utility-item
                 ">
        
        
        <a class="devsite-footer-utility-link gc-analytics-event" href="https://source.android.com/license" data-category="Site-Wide Custom Events" data-label="Footer License link">
          License
        </a>
        
      </li>
      
      <li class="devsite-footer-utility-item
                 ">
        
        
        <a class="devsite-footer-utility-link gc-analytics-event" href="https://policies.google.com/privacy" data-category="Site-Wide Custom Events" data-label="Footer Privacy link">
          Privacy
        </a>
        
      </li>
      
      <li class="devsite-footer-utility-item
                 ">
        
        
        <a class="devsite-footer-utility-link gc-analytics-event" href="https://issuetracker.google.com/issues/new?component=191476" data-category="Site-Wide Custom Events" data-label="Footer Site feedback link">
          Site feedback
        </a>
        
      </li>
      
    </ul>
    

<devsite-language-selector>
  <devsite-select class="devsite-language-selector-menu">
    
    <select aria-label="Select your language preference." class="devsite-language-selector-select" name="language" track-name="click" track-type="languageSelector">
    
      
      <option selected="selected">Language</option>
    
    
      <option value="en" track-metadata-original-language="en" track-metadata-selected-language="en" track-name="changed" track-type="languageSelector" lang="en">
        English
      </option>
    
      <option value="id" track-metadata-original-language="en" track-metadata-selected-language="id" track-name="changed" track-type="languageSelector" lang="id">
        Bahasa Indonesia
      </option>
    
      <option value="de" track-metadata-original-language="en" track-metadata-selected-language="de" track-name="changed" track-type="languageSelector" lang="de">
        Deutsch
      </option>
    
      <option value="es_419" track-metadata-original-language="en" track-metadata-selected-language="es_419" track-name="changed" track-type="languageSelector" lang="es_419">
        Español – América Latina
      </option>
    
      <option value="fr" track-metadata-original-language="en" track-metadata-selected-language="fr" track-name="changed" track-type="languageSelector" lang="fr">
        Français
      </option>
    
      <option value="it" track-metadata-original-language="en" track-metadata-selected-language="it" track-name="changed" track-type="languageSelector" lang="it">
        Italiano
      </option>
    
      <option value="pl" track-metadata-original-language="en" track-metadata-selected-language="pl" track-name="changed" track-type="languageSelector" lang="pl">
        Polski
      </option>
    
      <option value="pt_br" track-metadata-original-language="en" track-metadata-selected-language="pt_br" track-name="changed" track-type="languageSelector" lang="pt_br">
        Português – Brasil
      </option>
    
      <option value="vi" track-metadata-original-language="en" track-metadata-selected-language="vi" track-name="changed" track-type="languageSelector" lang="vi">
        Tiếng Việt
      </option>
    
      <option value="tr" track-metadata-original-language="en" track-metadata-selected-language="tr" track-name="changed" track-type="languageSelector" lang="tr">
        Türkçe
      </option>
    
      <option value="ru" track-metadata-original-language="en" track-metadata-selected-language="ru" track-name="changed" track-type="languageSelector" lang="ru">
        Русский
      </option>
    
      <option value="he" track-metadata-original-language="en" track-metadata-selected-language="he" track-name="changed" track-type="languageSelector" lang="he">
        עברית'
      </option>
    
      <option value="ar" track-metadata-original-language="en" track-metadata-selected-language="ar" track-name="changed" track-type="languageSelector" lang="ar">
        العربيّة
      </option>
    
      <option value="fa" track-metadata-original-language="en" track-metadata-selected-language="fa" track-name="changed" track-type="languageSelector" lang="fa">
        فارسی
      </option>
    
      <option value="hi" track-metadata-original-language="en" track-metadata-selected-language="hi" track-name="changed" track-type="languageSelector" lang="hi">
        हिंदी
      </option>
    
      <option value="bn" track-metadata-original-language="en" track-metadata-selected-language="bn" track-name="changed" track-type="languageSelector" lang="bn">
        বাংলা
      </option>
    
      <option value="th" track-metadata-original-language="en" track-metadata-selected-language="th" track-name="changed" track-type="languageSelector" lang="th">
        ภาษาไทย
      </option>
    
      <option value="zh_cn" track-metadata-original-language="en" track-metadata-selected-language="zh_cn" track-name="changed" track-type="languageSelector" lang="zh_cn">
        中文 – 简体
      </option>
    
      <option value="zh_tw" track-metadata-original-language="en" track-metadata-selected-language="zh_tw" track-name="changed" track-type="languageSelector" lang="zh_tw">
        中文 – 繁體
      </option>
    
      <option value="ja" track-metadata-original-language="en" track-metadata-selected-language="ja" track-name="changed" track-type="languageSelector" lang="ja">
        日本語
      </option>
    
      <option value="ko" track-metadata-original-language="en" track-metadata-selected-language="ko" track-name="changed" track-type="languageSelector" lang="ko">
        한국어
      </option>
    
    </select>
  <div class="devsite-select"><label id="devsite-select-217416008158009155-label" style="display:none;" aria-label="Select your language preference.">Select an option</label><button type="button" class="devsite-select-toggle" id="devsite-select-217416008158009155-button" aria-haspopup="true" aria-labelledby="devsite-select-217416008158009155-label devsite-select-217416008158009155-button" aria-controls="devsite-select-217416008158009155-popup">Language</button><span class="devsite-icon devsite-icon-arrow-drop-down devsite-select-toggle-icon" aria-hidden="true"></span><ul class="devsite-select-list" id="devsite-select-217416008158009155-popup" tabindex="-1" role="listbox" scrollbars="" aria-labelledby="devsite-select-217416008158009155-button"><li role="option" id="devsite-select-217416008158009155-0" class="devsite-select-item" data-index="0" aria-selected="false" aria-label="Language">Language</li><li role="option" id="devsite-select-217416008158009155-1" class="devsite-select-item" data-index="1" aria-selected="false" aria-label="English" value="en" lang="en">English</li><li role="option" id="devsite-select-217416008158009155-2" class="devsite-select-item" data-index="2" aria-selected="false" aria-label="Bahasa Indonesia" value="id" lang="id">Bahasa Indonesia</li><li role="option" id="devsite-select-217416008158009155-3" class="devsite-select-item" data-index="3" aria-selected="false" aria-label="Deutsch" value="de" lang="de">Deutsch</li><li role="option" id="devsite-select-217416008158009155-4" class="devsite-select-item" data-index="4" aria-selected="false" aria-label="Español – América Latina" value="es_419" lang="es_419">Español – América Latina</li><li role="option" id="devsite-select-217416008158009155-5" class="devsite-select-item" data-index="5" aria-selected="false" aria-label="Français" value="fr" lang="fr">Français</li><li role="option" id="devsite-select-217416008158009155-6" class="devsite-select-item" data-index="6" aria-selected="false" aria-label="Italiano" value="it" lang="it">Italiano</li><li role="option" id="devsite-select-217416008158009155-7" class="devsite-select-item" data-index="7" aria-selected="false" aria-label="Polski" value="pl" lang="pl">Polski</li><li role="option" id="devsite-select-217416008158009155-8" class="devsite-select-item" data-index="8" aria-selected="false" aria-label="Português – Brasil" value="pt_br" lang="pt_br">Português – Brasil</li><li role="option" id="devsite-select-217416008158009155-9" class="devsite-select-item" data-index="9" aria-selected="false" aria-label="Tiếng Việt" value="vi" lang="vi">Tiếng Việt</li><li role="option" id="devsite-select-217416008158009155-10" class="devsite-select-item" data-index="10" aria-selected="false" aria-label="Türkçe" value="tr" lang="tr">Türkçe</li><li role="option" id="devsite-select-217416008158009155-11" class="devsite-select-item" data-index="11" aria-selected="false" aria-label="Русский" value="ru" lang="ru">Русский</li><li role="option" id="devsite-select-217416008158009155-12" class="devsite-select-item" data-index="12" aria-selected="false" aria-label="עברית'" value="he" lang="he">עברית'</li><li role="option" id="devsite-select-217416008158009155-13" class="devsite-select-item" data-index="13" aria-selected="false" aria-label="العربيّة" value="ar" lang="ar">العربيّة</li><li role="option" id="devsite-select-217416008158009155-14" class="devsite-select-item" data-index="14" aria-selected="false" aria-label="فارسی" value="fa" lang="fa">فارسی</li><li role="option" id="devsite-select-217416008158009155-15" class="devsite-select-item" data-index="15" aria-selected="false" aria-label="हिंदी" value="hi" lang="hi">हिंदी</li><li role="option" id="devsite-select-217416008158009155-16" class="devsite-select-item" data-index="16" aria-selected="false" aria-label="বাংলা" value="bn" lang="bn">বাংলা</li><li role="option" id="devsite-select-217416008158009155-17" class="devsite-select-item" data-index="17" aria-selected
</devsite-language-selector>

  </nav>
</div>
          
        </devsite-footer-utility>
      </section></section>
    <devsite-sitemask></devsite-sitemask>
    <devsite-snackbar></devsite-snackbar>
    <devsite-tooltip></devsite-tooltip>
    <devsite-heading-link></devsite-heading-link>
    <devsite-analytics enable-analytics-iframe="">
      
        <script async="" src="Android%20Release%20Security%20Acknowledgements_files/app_loader.js"></script><script type="application/json" analytics="">[{"gaid": "UA-45455297-1", "dimensions": {"dimension5": "en", "dimension3": false, "dimension8": null, "dimension1": "Signed out", "dimension6": "en", "dimension4": "Android Open Source Project", "dimension9": false}, "metrics": {"ratings_value": "metric1", "ratings_count": "metric2"}}]</script>
<script type="application/json" gtm="">{"parameters": {"freeTrialEligibleUser": "False", "internalUser": "False", "language": {"machineTranslated": "False", "requested": "en", "served": "en"}, "pageType": "article", "projectName": "Android Open Source Project", "scriptsafe": null, "signedIn": "False", "tenant": "androidsource"}}</script>
      
    <iframe src="Android%20Release%20Security%20Acknowledgements_files/analytics-iframe.html"></iframe></devsite-analytics>
    
    
    <script nonce="YjoY+f+Ru8ELtugcGJYxNv5DB86dnZ">
  
  (function(d,e,v,s,i,t,E){d['GoogleDevelopersObject']=i;
    t=e.createElement(v);t.async=1;t.src=s;E=e.getElementsByTagName(v)[0];
    E.parentNode.insertBefore(t,E);})(window, document, 'script',
    'https://www.gstatic.com/devrel-devsite/prod/vbd4700e58d826f0eab371eadc20e0e343567df356800794a790eebf2ac059db2/androidsource/js/app_loader.js', '[7,"en",null,"/js/devsite_app_module.js","https://www.gstatic.com/devrel-devsite/prod/vbd4700e58d826f0eab371eadc20e0e343567df356800794a790eebf2ac059db2","https://www.gstatic.com/devrel-devsite/prod/vbd4700e58d826f0eab371eadc20e0e343567df356800794a790eebf2ac059db2/androidsource","https://androidsource-dot-devsite-v2-prod.appspot.com",null,null,["/_pwa/androidsource/manifest.json","/_static/images/video-placeholder.svg","https://www.gstatic.com/devrel-devsite/prod/vbd4700e58d826f0eab371eadc20e0e343567df356800794a790eebf2ac059db2/androidsource/images/favicon.png","https://www.gstatic.com/devrel-devsite/prod/vbd4700e58d826f0eab371eadc20e0e343567df356800794a790eebf2ac059db2/androidsource/images/lockup.svg","https://fonts.googleapis.com/css?family=Roboto:300,400,400italic,500,500italic,700,700italic|Roboto+Mono:400,500,700|Material+Icons"],1,null,[1,6,8,12,14,17,21,25,40,50,63,70,75,76,80,87,88,91,92,93,97,98,100,101,102,103,105,107,111,113,115,120,122]]')
  
</script>
    <devsite-a11y-announce aria-live="assertive" aria-atomic="true"></devsite-a11y-announce>
  
</body></html>