Android Security Advisories

Details

Android Enterprise Recommended

Vulnerability Response

Introduction to vivo Android Security Updates.

At vivo, we take security issues very seriously and we are doing our best to respond as soon as possible. Securing your device and maintaining the trust you place in us is our top priority.

vivo releases monthly, quarterly and regular security updates on selected vivo devices listed below. Security updates will include Android security patches released by Google.

  • Current Models for Monthly Security Updates

      iQOO 13
      iQOO 12
      iQOO 11
      iQOO 9, iQOO 9 SE, iQOO 9 Pro, iQOO 9T
      iQOO Neo9 Pro
      iQOO Neo7, iQOO Neo7 Pro
      iQOO Neo6
      iQOO Z9 5G, iQOO Z9x 5G, iQOO Z9 Lite 5G, iQOO Z9 Pro 5G, iQOO Z9s 5G
      iQOO Z5
      X Fold3 Pro
      X200, X200 Pro
      X100, X100 Pro
      X90, X90 Pro
      X80, X80 Pro, X80 Lite 5G
      X70, X70t Pro, X70 Pro+
      V50, V50 Lite 5G, V50e
      V40, V40 Pro, V40 Lite, V40 Lite 5G, V40 SE, V40 SE 5G, V40 SE 80W, V40e
      V30, V30 Pro, V30 Lite, V30 Lite 5G, V30 SE
      V29, V29 Pro, V29e, V29e 5G, V29 Lite 5G
      V27, V27e, V27 pro
      V25, V25e, V25 Pro
      V23e 5G
      T3 Lite 5G, T3 Pro 5G
      T2 5G, T2 Pro 5G
      Y03, Y03t
      Y15C
      Y18, Y18e, Y18i, Y18t
      Y19s
      Y28, Y28s 5G, Y28e 5G
      Y29 5G, Y29s 5G
      Y33T
      Y38 5G
      Y55
      Y78 5G
      Y100, Y100 5G
      Y200, Y200e 5G
      Y300 5G, Y300 Plus 5G

  • Current Models for Quarterly Security Updates

      iQOO Z7 5G, iQOO Z7x 5G, iQOO Z7s 5G, iQOO Z7 Pro 5G
      iQOO Z6, iQOO Z6 5G, iQOO Z6 Lite 5G
      T1, T1 5G, T1x, T1 Pro 5G
      T2 5G, T2 Pro 5G
      S1 Prime
      Y01, Y01A
      Y02, Y02A, Y02s, Y02t
      Y12D
      Y15A, Y15s
      Y16
      Y17s
      Y20T
      Y21A, Y21T
      Y22, Y22s
      Y27, Y27 5G
      Y28 5G
      Y30, Y30 5G
      Y33T
      Y35
      Y36, Y36 5G
      Y37 5G
      Y56 5G
      Y100 Y100A
      Y200 5G

  • Current Models for Regular Security Updates

      NEX
      NEX 3
      NEX Dual Display
      iQOO 3
      iQOO 7, iQOO 7 Legend
      iQOO Z3 5G
      X21
      X50, X50 Pro, X50 Lite, vivo X50e
      X60, X60 Pro, X60 Pro+
      V23 5G, V23 Pro
      V21, V21e, V21 5G, V21e 5G
      V20, V20 2021, V20 Pro, V20 SE
      V19
      V17, V17 Pro
      V15, V15Pro
      V11, V11i, V11Pro
      V9, V9 6GB, V9 Pro, V9 Youth
      S1, S1 Pro
      Z1x
      Z1Pro
      U10
      U20
      Y1s
      Y3s
      Y11, Y11s
      Y12, Y12A, Y12G, Y12s 2021, Y12s
      Y15
      Y17
      Y19
      Y20, Y20 2021, Y20A, Y20A 2021, Y20i, Y20s, Y20s [G], Y20G, Y20G 2021
      Y21, Y21e, Y21s
      Y31
      Y33, Y33s
      Y50
      Y51, Y51s
      Y52 5G
      Y53s
      Y55 5G
      Y70
      Y72 5G
      Y73
      Y76 5G

  • Disclaimer

    1. Please note that in some cases regular OS upgrades may cause delays to planned security updates. However, users can be rest assured the OS upgrades will include up-to-date security patches when delivered.
    2. Some patches to be received from chipset vendors (also known as Device Specific patches) may not be included in the security update package of the month. They will be included in upcoming security update packages as soon as the patches are ready to deliver.
    3. Some patches may require a long test and merge cycle. They will be included in upcoming security update packages as soon as the patches are ready to deliver.
    4. While vivo is committed to deliver security patch updates to all applicable models as soon as possible, please note that the delivery time of security patches may vary depending on the regions and models. Under certain circumstances, security patch updates may be delayed due to force majeure. If delayed, the latest security patches will be included in upcoming security update packages.
Each month's security patches come from the Android Security Bulletins, as shown follow.

2025

  • 2025
  • 2024
  • 2023
  • 2022
  • 2021
  • 2020
  • 2019
  • January

  • Critical

    CVE-2024-43096, CVE-2024-43770, CVE-2024-43771, CVE-2024-49747, CVE-2024-49748, CVE-2024-20154

  • High

    CVE-2024-49724, CVE-2024-49732, CVE-2024-49735, CVE-2024-49737, CVE-2024-49738, CVE-2024-49744, CVE-2024-49745, CVE-2024-49733, CVE-2024-49749, CVE-2024-34722, CVE-2024-34730, CVE-2024-43095, CVE-2024-43765, CVE-2024-49742, CVE-2024-49734, CVE-2024-43763, CVE-2024-49736, CVE-2024-20146, CVE-2024-20148, CVE-2024-20105, CVE-2024-20140, CVE-2024-20143, CVE-2024-20144, CVE-2024-20145, CVE-2024-21464, CVE-2024-45553, CVE-2024-45558
Please note this page is for AER device users. If you are not an AER device user, please refer to the Android Security Advisories Tab for more details.

  • Android Enterprise Recommended Device List.

    Device marketing name Security update support OS version update support
      V50e   End date: 04/2029  at least(Global)
      Frequency: Every 30 days    		   Shipped version: Android 15
      Future version: Android 16&17&18 at least(Global)
      Y19s   End date: 07/2028  at least(Global)
      Frequency: Every 30 days    		   Shipped version: Android 14
      Future version: Android 15&16 at least(Global)
      Y29s 5G   End date: 11/2028  at least(Global)
      Frequency: Every 30 days    		   Shipped version: Android 15
      Future version: Android 16&17 at least(Global)
      V50 Lite 5G   End date: 06/2028  at least(Global)
      Frequency: Every 30 days    		   Shipped version: Android 15
      Future version: Android 16&17 at least(Global)
      V50   End date: 12/2028 at least(Global)
      Frequency: Every 30 days    		   Shipped version: Android 15
      Future version: Android 16&17&18 at least(Global)
      V40 Lite(V2341)   End date: 07/2027
      Frequency: Every 30 days    		   Shipped version: Android 14
      Future version: Android 15&16
      Y28s 5G   End date: 11/2027
    		   Shipped version: Android 14
      Future version: Android 15&16
      V40   End date: 09/2027
      Frequency: Every 30 days    		   Shipped version: Android 14
      Future version: Android 15&16
      V40 SE 5G   End date: 05/2027
      Frequency: Every 30 days    		   Shipped version: Android 14
      Future version: Android 15&16
      V29   End date: 12/2025
      Frequency: Every 30 days    		   Shipped version: Android 13
      Future version: Android 14&15
      V29 Lite 5G   End date: 12/2025
      Frequency: Every 30 days    		   Shipped version: Android 13
      Future version: Android 14&15

  • Android Enterprise Recommended (AER) Disclaimer:

    1.Please note this page is for AER device users. If you are not an AER device user, please refer to the Android Security Advisories Tab for more details.
    2. Please note that in some cases regular OS upgrades may cause delays to planned security updates.However,users can be rest assured the OS upgrades wil include up-to-date security patches when delivered.
    3. Some patches to be received from chipset vendors (also known as Device Specific patches) may not be included in the security update package of the month. They will be included in upcoming security update packages as soon as the patches are ready to deliver.
    4. Some patches may require a long test and merge cycle. They will be included in upcoming security update packages as soon as the patches are ready to deliver.
    5. While vivo is committed to deliver security patch updates to all applicable models as soon as possible, please note that the delivery time of security patches may vary depending on the regions and models. Under certain circumstances, security patch updates may be delayed due to force majeure. If delayed, the latest security patches will be included in upcoming security update packages.

  • Android is a trademark of Google LLC

Vulnerability Response Process

  • Receive Vulnerabilities

    Receive vulnerability reports and Initiate vulnerability response process

  • Vulnerability Analysis

    Verify the submitted vulnerabilities and evaluate the risk level

  • Vulnerability Fixes

    Develop vulnerability repair plans and repair cycles

  • Vulnerability Fix Notification

    Provide feedback to the vulnerability reporter on the progress and results of the handling process via email

Report Vulnerabilities

You can report vulnerabilities through email（security@vivo.com）.Since vulnerability information is sensitive, we strongly recommend that you use our PGP public key (fingerprint: CE48C83712B84EE88E57A678884C95C622AE7FFE) to encrypt the vulnerability when reporting it via email.

In order to better help us confirm potential vulnerability information, please include but not be limited to the following information in the email:

  • 1.Your organization/title and contact information
  • 2.Affected products and versions
  • 3.Detailed description of potential vulnerabilities
  • 4.Proof of exploitation of potential vulnerabilities, such as POC, exploit, network packet capture, problem reproduction steps, etc.
  • 5.Information about how the vulnerability has been publicly exploited (if any)

Attention

We oppose and condemn all hacker behaviors that use vulnerability testing as an excuse to exploit security vulnerabilities to cause damage and harm the interests of users.Therefore, the following behaviors are prohibited:

  • -Exploiting vulnerabilities to steal user information
  • -Invading business systems
  • -Modifying or stealing related system information
  • -Maliciously spreading vulnerabilities or data

About US

In order to jointly build an Internet health and security ecosystem and strengthen the security defense capabilities of products and businesses, we works with industry institutions and developers to deepen technical cooperation and promote efficient governance of security vulnerabilities by building a vulnerability collection and emergency response mechanism.

If you encounter problems when reporting vulnerabilities, you can contact us by email（security@vivo.com）.

vivo Global