Skip to content
COOEY

FAIL › dossier

Android Kernel

PRODUCT

· dossier confidence 40%

Android, developed by Google, is a dominant mobile operating system built on the Linux kernel. Its security track record shows a pattern of critical kernel vulnerabilities, including high-severity RCEs and privilege escalations, which pose significant risks to enterprise and defense environments.

Failure events
2
Zero-days
0
RCEs
1
On KEV
2
Critical
0
Worst shame
78
PROFILE
CategoryOperating System / Mobile PlatformWhat they doAndroid is an open-source mobile operating system developed by Google, built on the Linux kernel and used primarily on smartphones and tablets.Ownershipprivate Websitehttps://source.android.com ↗
SECURITY POSTURE

Android's security posture is characterized by a high volume of critical kernel vulnerabilities, including privilege escalation and RCEs, often requiring patching cycles that may lag behind threat actor exploitation.

Notable failures
  • CVE-2019-2215: Use-after-free RCE in Android kernel
  • CVE-2020-0041: Out-of-bounds write privilege escalation in Android kernel
Patterns: repeated unpatched edge-device RCEs; kernel-level privilege escalation via use-after-free and out-of-bounds writes
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2021-11-03 CVE-2019-2215 high A use-after-free vulnerability in the Android kernel allowed privilege escalation from an app to the Linux kernel, often chained with other CVEs to gain full control.
2021-11-03 CVE-2020-0041 high An out-of-bounds write vulnerability in the Android kernel allowed local privilege escalation when chained with other known CVEs.
DOSSIER SOURCES
Open questions: Exact founding year of the Android project · Headquarters location of the Android project
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-30 04:19:44.762251+00:00