Android Security Acknowledgements

The Android Security Team would like to thank the following people and parties for helping to improve Android security. They have done this either by finding and responsibly reporting security vulnerabilities through the AOSP bug tracker Security bug report template or by committing code that has a positive impact on Android security, including code that qualifies for the Patch Rewards program.

2021

Starting in 2018 and continuing in 2021, the security acknowledgements are listed by month. In prior years, acknowledgements were listed together.

April

Researchers	CVEs
Chong Wang (王冲)	CVE-2021-0436, CVE-2021-0437, CVE-2021-0471
Cusas of L.O. Team	CVE-2021-0431, CVE-2021-0435
Elliott Brooks	CVE-2021-0443
GWP-ASan	CVE-2021-0429, CVE-2021-0432
Mingming Wang (汪明明)	CVE-2021-0442
Ned Williamson of Google Project Zero	CVE-2021-0430
Rob Carr of Google	CVE-2021-0438
Sergey Toshin (@bagipro) from Oversecured Inc.	CVE-2021-0444
Soonil Nagarkar of Google	CVE-2021-0400
Weiteng Chen (wchen130@ucr.edu)	CVE-2020-11231
WuHeng Lab of Bytedance	CVE-2021-0428
Xiaobo Xiang; Guang Gong of Alpha Lab, Qihoo 360 Technology Co. Ltd	CVE-2021-0426, CVE-2021-0427

March

Researchers	CVEs
18be2a6c	CVE-2021-0449, CVE-2021-0450, CVE-2021-0451, CVE-2021-0452, CVE-2021-0453, CVE-2021-0454, CVE-2021-0455, CVE-2021-0456
360 Alpha Lab	CVE-2020-11290
7h0r	CVE-2021-0391
Alvin Abdagic of Google	CVE-2021-0369
Aman Pandey of bugsmirror	CVE-2021-0389
Andr. Ess	CVE-2020-0025
Android Security Red Team	CVE-2021-0371
Arash Tohidi (h4ul4)	CVE-2020-11194, CVE-2020-11195
Ben Hutchings of Codethink Ltd	CVE-2020-11230
Bodong Zhao from Tsinghua University	CVE-2021-0461
Dharmeshkumar Mokani of Google	CVE-2021-0375
Fei, Wenwen Wang, and Cusas of L.O.Team	CVE-2021-0397
Gengjia Chen ( @chengjia4574 ) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2021-0370, CVE-2020-11308
GWP-ASan	CVE-2021-0464
hhjack (hhj4ck)	CVE-2020-11199
Hongli Han (@hexb1n) and Guang Gong (@oldfresher) of 360 Alpha Lab working with 360 BugCloud	CVE-2021-0387, CVE-2021-0392, CVE-2021-0395
Jeff Sharkey of Google	CVE-2021-0376
Jesse Chang and Jack Tang of Trend Micro working with Trend Micro's Zero Day Initiative	CVE-2021-0457, CVE-2021-0458, CVE-2021-0459, CVE-2021-0460
Jun Yao (姚俊) (@_2freeman) and Guang Gong (@oldfresher) of 360 Alpha Lab working with 360 BugCloud	CVE-2020-11309
Miao Hu and Yufei Liu of KeenLab (@keen_lab), Tencent	CVE-2021-0383, CVE-2021-0388
Michał Bednarski (michalbednarski)	CVE-2021-0382, CVE-2021-0398
Mitch Phillips using HWASan/GWP-ASan	CVE-2021-0465, CVE-2021-0463
Qidan He (@flanker_hqd"	CVE-2021-0393
Roshan Pius of Google	CVE-2021-0390
Steven Moreland of Google	CVE-2021-0394
Wen Guanxing from Pangu LAB	CVE-2020-3664
Will Coster of Google	CVE-2021-0377
Xianfeng Lu (卢先锋) and Wu Chen (陈武) of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.	CVE-2021-0374
Xianfeng Lu (卢先锋) of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.	CVE-2021-0385
Yu-Cheng Lin (林禹成) (@AndroBugs)	CVE-2021-0380

February 2021

Researchers	CVEs
7h0r	CVE-2021-0333
Bernardo Rufino of Google	CVE-2021-0302, CVE-2021-0305
Chong Zhang of Android Media Team	CVE-2021-0340
Domien Schepers	CVE-2020-11270, CVE-2020-11280, CVE-2020-11281, CVE-2020-11287
Edward Cunningham of Google	CVE-2021-0339
Hongli Han (@hexb1n) and Guang Gong (@oldfresher) of 360 Alpha Lab working with 360 BugCloud	CVE-2021-0329, CVE-2021-0330, CVE-2021-0332
Jeyasri. A (LinkedIn, @Jeyasri001, @jeyasri__001) and mr.karthikeyan (LinkedIn)	CVE-2021-0334
Man Yue Mo of GitHub Security Lab	CVE-2020-11282
Manthi Le of Infosys at Google	CVE-2021-0335
Matthew Daley	CVE-2021-0337
Michał Bednarski (michalbednarski)	CVE-2021-0327
OSS-Fuzz and Jouni Malinen, Qualcomm	CVE-2021-0326
Raymond Wang	CVE-2021-0338
Sulthan Alaudeen (@parallel_beings)	CVE-2020-11286
Vincent Toubiana	CVE-2021-0328
Will Coster of Google	CVE-2020-11203
Yuri Schimke of Google	CVE-2021-0341

January 2021

Researchers	CVEs
7h0r	CVE-2021-0315
Aman Pandey of bugsmirror	CVE-2021-0319
Anthony Steinhauser of Google	CVE-2020-10767
excalibursec59@gmail.com of topsec (蒋钟庆)	CVE-2016-6328
Gengjia Chen (@chengjia4574) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2021-0316
Gerald Palfinger, A-SIT Secure Information Technology Center Austria / Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology	CVE-2021-0321
Hasini Gunasinghe of Google	CVE-2021-0320
Hongli Han (@hexb1n) and Guang Gong (@oldfresher) of 360 Alpha Lab working with 360 BugCloud	CVE-2020-11161, CVE-2021-0310, CVE-2021-0318
Jazzy (@ret2jazzy) of Google	CVE-2021-0308
Jun Yao (姚俊) (@_2freeman) and Guang Gong (@oldfresher) of 360 Alpha Lab working with 360 BugCloud	CVE-2020-11160
Konstantin Milev	CVE-2021-0313
Le Wu (吴乐) of Baidu Security	CVE-2021-0301
Man Yue Mo of GitHub Security Lab	CVE-2020-11239, CVE-2020-11261
Marco Nelissen of Google	CVE-2021-0311
Matthew Daley	CVE-2021-0309
Nathaniel Theis of IOActive security consultant	CVE-2020-0471
Rui Li and Wenrui Diao, Shandong University	CVE-2021-0307, CVE-2021-0317
Sergei Glazunov of Google Project Zero	CVE-2020-15999
syzkaller, kernel fuzzer	CVE-2021-0342
Wenrui Diao & Rui Li, Shandong University	CVE-2021-0306
Xianbo Wang (@sanebow) of MobiTec, The Chinese University of Hong Kong	CVE-2020-27059
Xiaodong Wang	CVE-2020-11250
Zhaoming Yin of Google	CVE-2021-0303

2020

December 2020

Researchers	CVEs
Abhay Kailasia, student of Lakshmi Narain College of Technology, Bhopal, MP, INDIA	CVE-2020-0473,CVE-2020-0485
Alan Stokes of Google	CVE-2020-27056
Aman Pandey	CVE-2020-27054
Andr. Ess	CVE-2020-0202
Andrii Kulian of Google	CVE-2020-0440
Android Security Red Team	CVE-2020-0465, CVE-2020-27031, CVE-2020-27033, CVE-2020-27043
Ben Hawkes	CVE-2020-11179
Chong Wang (王冲) (weibo.com/csddl) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2020-11183, CVE-2020-27036, CVE-2020-27037, CVE-2020-27040
d414d4	CVE-2020-27066, CVE-2020-27067
Daniel Jarai of Bartec Pixavi	CVE-2020-27052
David Su of Google	CVE-2020-0459, CVE-2020-27053
Edward Cunningham of Google	CVE-2020-0294,CVE-2020-0464, CVE-2020-0500, CVE-2020-27041
excalibursec59@gmail.com of topsec (蒋钟庆)	CVE-2020-0470, CVE-2020-0478
Gengjia Chen (@chengjia4574) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2020-27021,CVE-2020-27027, CVE-2020-27028
gzobqq@gmail.com	CVE-2020-0466
Haikuo Xie of Huawei Security and Ying Wang of Baidu Security Lab	CVE-2020-11225
Hamzeh Zawawy of Google	CVE-2020-0244
Hao Liu and Jianqiang Zhao of IceSword Lab, Qihoo 360	CVE-2020-0482,CVE-2020-0493, CVE-2020-0495, CVE-2020-0496, CVE-2020-11152
Hao Zhou, Xiapu Luo from the Hong Kong Polytechnique University, Haoyu Wang, Xiaoting Wang from the Beijing University of Posts and Telecommunications, Yajin Zhou from the Zhejiang University, and Yutian Tang from the Shanghai Tech University	CVE-2020-27057
Hongli Han (@hexb1n) and Guang Gong (@oldfresher) of 360 Alpha Lab working with 360 BugCloud	CVE-2020-0483, CVE-2020-0484, CVE-2020-11148, CVE-2020-27035
Hugo M. H. Hue of the Chinese University of Hong Kong (CUHK)	CVE-2020-27055
Jun Yao (姚俊) (@_2freeman) and Guang Gong (@oldfresher) of 360 Alpha Lab working with 360 BugCloud	CVE-2020-11146, CVE-2020-11149, CVE-2020-11150, CVE-2020-11151
Le Wu (吴乐) of Baidu Security	CVE-2020-0455, CVE-2020-0456, CVE-2020-0457
Linus Tufvesson of Google	CVE-2020-0475
Matthew Daley	CVE-2020-0479, CVE-2020-0480, CVE-2020-0481, CVE-2020-0486, CVE-2020-0497, CVE-2020-27032
Maxim Pestryakov	CVE-2020-0099
Michael Farrell of Google	CVE-2020-27026
Nathan Harold of Google	CVE-2020-0460, CVE-2020-0468
Paul Ngo	CVE-2020-0467
Pengfei Ding (丁鹏飞) of Huawei	CVE-2020-27068
Phil Burk of Google	CVE-2020-0458
Pierre-Hugues Husson	CVE-2020-0016, CVE-2020-0019
Pratheesh P. Narayanan	CVE-2020-27029
Rubin Xu of Google	CVE-2020-0469
Stephen Crane of Immunant	CVE-2020-27044
syzkaller, kernel fuzzer	CVE-2020-0444
Tao Sauvage of IOActive	CVE-2020-27045, CVE-2020-27046, CVE-2020-27047, CVE-2020-27048, CVE-2020-27049, CVE-2020-27050, CVE-2020-27051
Titan of MS509Team	CVE-2020-27034, CVE-2020-27039
Wenwen Wang and Fei of L.O. Team	CVE-2020-0463
Will Coster of Google	CVE-2020-27023, CVE-2020-27025
Xianfeng Lu (卢先锋) and Wu Chen (陈武) of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.	CVE-2020-27024
Xiaobo Xiang and Guang Gong of Alpha Lab, Qihoo 360 Technology Co. Ltd	CVE-2020-0489
Xuan Xing of Google	CVE-2020-0280
Yu-Cheng Lin (林禹成) (@AndroBugs)	CVE-2020-0477, CVE-2020-27030
Zhaoming Yin of Google	CVE-2020-0474

November

Researchers	CVEs
Alwen Tiu of The Australian National University and Jim Mussared of George Robotics	CVE-2020-12856
Aman Pandey	CVE-2020-0448
Anonymous	CVE-2020-0437, CVE-2020-11123
Dylan Katz of Leviathan Security	CVE-2020-0409
Joel Reardon, University of Calgary and AppCensus, Inc.	CVE-2020-0454
Ned Williamson and Hua Sun of Google	CVE-2020-0424
Pratheesh P. Narayanan	CVE-2020-0441, CVE-2020-0442
Qi Zhao and Guang Gong 360 Alpha Lab working with 360 BugCloud	CVE-2020-11132
Sithija Abhishek Kotuwewatta	CVE-2020-0443
Stephen Crane	CVE-2020-0438
Tao Sauvage of IOActive	CVE-2020-0450
Wei Liu (刘炜) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室)	CVE-2020-0452
Wenke Dou and Guang Gong (@oldfresher) of Alpha Lab, Qihoo 360 Technology Co. Ltd.	CVE-2020-11121, CVE-2020-11130
Wenrui Diao and Rui Li of Shandong University	CVE-2020-0418
Winson Chiu of Google	CVE-2020-0439
XUEN LI (@lxe524) and Le Wu (吴乐) of Baidu Security	CVE-2020-0445, CVE-2020-0446
Yang Xiao (@VARAS_IIE)	CVE-2020-11131

October

Researchers	CVEs
Bernardo Rufino of Google	CVE-2020-0416
Chong Wang (王冲) (csddl147@gmail.com)	CVE-2020-0377, CVE-2020-0413
Dai of L.O. Team	CVE-2020-0411
Dylan Katz of Leviathan Security	CVE-2020-0408, CVE-2020-0421
Edward Cunningham of Google	CVE-2020-0412, CVE-2020-0419
Francesco Durighetto of Bandyer	CVE-2020-0414
Hao Liu and Jianqiang Zhao of IceSword Lab, Qihoo 360	CVE-2020-0213
hard_______	CVE-2020-0422
Hongli Han (@hexb1n) and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2019-2194
Jun Yao (姚俊) (@_2freeman) and Guang Gong (@oldfresher) of 360 Alpha Lab working with 360 BugCloud	CVE-2020-11173, CVE-2020-11174
Matheus E. Garbelini, Sudipta Chattopadhyay, and Chundong Wang of Singapore University Technology and Design	CVE-2020-3703, CVE-2020-3704
Matthew Daley	CVE-2020-0246, CVE-2020-0378
Sergei Volokitin of Riscure	CVE-2020-0283, CVE-2020-0339, CVE-2020-0367, CVE-2020-0371, CVE-2020-0376
Will Coster of Google	CVE-2020-0410, CVE-2020-0415
Xiaodong Wang, Hongli Han, Peng Zhou and Guang Gong of 360 Alpha Lab working with 360 BugCloud	CVE-2020-0423
Yiwei Zhang of Google	CVE-2020-0420
Yu-Cheng Lin (林禹成) (@AndroBugs)	CVE-2020-0215

September

Researchers	CVEs
derrek	CVE-2019-10498
Abhijeet Kaur of Google	CVE-2020-0382
Alain Iamburg of IO Active	CVE-2020-0432
Anonymous	CVE-2020-0393
Arash Tohidi (h4ul4)	CVE-2019-14074
d414d4 (d414d4@gmail.com)	CVE-2020-0430, CVE-2020-0433
Edward Cunningham of Google	CVE-2020-0074, CVE-2020-0387
Elena Petrova of Google	CVE-2020-0427
Eric Biggers of Google	CVE-2020-0407
Evgenii Stepanov of Google	CVE-2019-10518
Hamzeh Zawawy of Google	CVE-2020-0380
Hao Liu and Jianqiang Zhao of IceSword Lab, Qihoo 360	CVE-2020-0435
hard_______	CVE-2020-0388
Hayawardh Vijayakumar (vijayakuma@samsung.com) and Lee Harrison (lee.harrison@samsung.com)	CVE-2020-3679
Hongli Han (@hexb1n) and Guang Gong (@oldfresher) of 360 Alpha Lab working with 360 BugCloud	CVE-2020-0392
Ian Thompson of Green Hills Software	CVE-2020-0278
@ickyphuz	CVE-2019-2290
Jann Horn of Google Project Zero	CVE-2020-0390
Manish Patel of Green Hills Software	CVE-2020-0342
Matthew Daley	CVE-2020-0401
Max Spector, Hamzeh Zawawy, Kris Alder, Christopher Cole, Jessica Lin, Dmitry Vyukov, Michael Specter, and Abhishek Arya of Google	CVE-2020-0429
Mitch Phillips of Google	CVE-2020-0434, CVE-2020-3671
Pengfei Ding (丁鹏飞) of Huawei Mobile Security Lab	CVE-2019-2284, CVE-2019-10564
RA Position at Cactilab (https://cactilab.github.io/) of University at Buﬀalo	CVE-2020-0394
Ryan Johnson and Mohamed Elsabagh of Kryptowire	CVE-2020-0391
Shuo Qian of Google	CVE-2020-0396
Sourcell Xu of HatLab, DBAPP Security（安恒信息海特实验室的徐井源）	CVE-2020-0379
Tancy at Cactilab (https://cactilab.github.io/) of University at Buﬀalo	CVE-2020-0386
@TimGMichaud of Leviathan Security Group	CVE-2019-10521
Trend Micro	CVE-2019-10519
Xiaobo Xiang; Guang Gong of Alpha Lab, Qihoo 360 Technology Co. Ltd	CVE-2020-0381, CVE-2020-0383, CVE-2020-0384, CVE-2020-0385
Yanfeng Wang of C0RE Team, Qihoo 360 Technology Co. Ltd.	CVE-2020-3674

August

Researchers	CVEs
aedla	CVE-2020-11115, CVE-2020-11116, CVE-2020-11118
Dmitry Vyukov of Google	CVE-2020-0255
Dor Avraham from Nexar	CVE-2020-0108
Dzmitry Lukyanenka (https://www.linkedin.com/in/dzima)	CVE-2020-0238
Hongli Han (@hexb1n) and Guang Gong (@oldfresher) of 360 Alpha Lab working with 360 BugCloud	CVE-2020-0241, CVE-2020-0242, CVE-2020-0243
Jann Horn of Google Project Zero	CVE-2020-0257, CVE-2020-0258
Jianqiang Zhao (@jianqiangzhao) and pjf (weibo.com/jfpan) of IceSword Lab, Qihoo 360	CVE-2020-3646, CVE-2020-3647
Matthew Daley	CVE-2020-0239
Max Thomas	CVE-2020-11128
Maxim Pestryakov	CVE-2020-0099
Miao Hu and Yufei Liu of KeenLab (@keen_lab), Tencent (腾讯安全科恩实验室的胡淼和刘宇飞)	CVE-2020-0250
Pierre-Hugues Husson (@phhusson) of Softathome	CVE-2020-0259
Ray Sukhoi	CVE-2020-0240
Steven Moreland of Google	CVE-2020-0261
Vasily Vasiliev	CVE-2020-0256
Wu Le (吴乐) of Baidu Security	CVE-2020-0251, CVE-2020-0252, CVE-2020-0253, CVE-2020-0254, CVE-2020-0260

July

Researchers	CVEs
aedla	CVE-2020-3698
Alan Stokes of Google	CVE-2020-0122
Arash Tohidi (@h4ul4)	CVE-2019-14101
chengjia4574@gmail.com	CVE-2020-0225
Chi Zhang and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2019-14037
Chong Wang (王冲) (weibo.com/csddl) from Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2019-14093
Hongli Han (@hexb1n) and Guang Gong (@oldfresher) of 360 Alpha Lab working with 360 BugCloud	CVE-2020-0226
Ian Thompson of Green Hills Software	CVE-2020-0231
Jianqiang Zhao (@jianqiangzhao) and pjf (weibo.com/jfpan) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2019-14100
Matthew Daley	CVE-2020-0107
Ray Sukhoi	CVE-2020-0224
Ricky Wai of Google	CVE-2020-0227

June

Researchers	CVEs
Andr. Ess	CVE-2020-0133
Andrea Possemato (@_pox_) of IDEMIA	CVE-2020-0124, CVE-2020-0132, CVE-2020-0153, CVE-2020-0156, CVE-2020-0164, CVE-2020-0165, CVE-2020-0180, CVE-2020-0182, CVE-2020-0200, CVE-2020-0205, CVE-2020-0211,
Chi Zhang (email) and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2020-0129
Chong Wang (王冲) (weibo.com/csddl) and Zhe jin (金哲) from cdsrc of Qihoo 360 Technology Co. Ltd.	CVE-2020-0176, CVE-2020-0185
Cusas of L.O. Team	CVE-2020-0088, CVE-2020-0128, CVE-2020-0131, CVE-2020-0160, CVE-2020-0161, CVE-2020-0162, CVE-2020-0163, CVE-2020-0170, CVE-2020-0171, CVE-2020-0172, CVE-2020-0173, CVE-2020-0174, CVE-2020-0175, CVE-2020-0177, CVE-2020-0219
Cyrille Chatras of Orange Labs	CVE-2020-0199
Dacheng Shao (email) and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2019-10501
Daulet Zhanguzin of Google	CVE-2020-0187
Dave Burke of Google	CVE-2020-0203
Emilian Peev of Google	CVE-2020-0120
En He (何恩) (@heeeeen4x) of OPPO ZIWU Cyber Security Lab	CVE-2020-0114
En He (@heeeeen4x) and Wenbo Chen of OPPO ZIWU Cyber Security Lab	CVE-2020-0188
Evgenii Stepanov and Nick Desaulniers of Google	CVE-2020-0141
Gaokun Li (李高坤) (koozxcv) of Vulpecker Team, Qihoo 360 Technology Co. Ltd.	CVE-2020-0155
Gengjia Chen (@chengjia4574) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2020-0144, CVE-2020-0145, CVE-2020-0146, CVE-2020-0147, CVE-2020-0148, CVE-2020-0149, CVE-2020-0157, CVE-2020-0214, CVE-2020-0223, CVE-2020-0235
Hanxiang Wen (email) and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2019-9460
Hao Liu and Jianqiang Zhao of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2020-0138, CVE-2020-0213
Hongli Han (@hexb1n) and Guang Gong (@oldfresher) of 360 Alpha Lab working with 360 BugCloud	CVE-2020-0233
Jianqiang Zhao(@jianqiangzhao) and pjf (weibo.com/jfpan) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2017-9704
Jun Yao (姚俊) (@_2freeman) and Guang Gong (@oldfresher) of 360 Alpha Lab working with 360 BugCloud	CVE-2020-0232
Kris Alder of Google	CVE-2020-0181, CVE-2020-0198
Li Changjun (李长军) and Shen Ying(沈颖) from Huawei	CVE-2020-0206
Man Yue Mo of GitHub Security Lab	CVE-2020-0139, CVE-2020-0140, CVE-2020-0142, CVE-2020-0143
Matt Pape of Google	CVE-2020-0178
Matthew Daley	CVE-2020-0135
Mike dDavis	CVE-2020-0204
Min Jang (@skensita)	CVE-2020-0117, CVE-2020-0137
Mitch Phillips of Google	CVE-2020-0191, CVE-2020-0196
Mitch Phillips using GWP-ASan	CVE-2020-0113
Nate Jiang of Google	CVE-2020-0119
Niky1235 (@jiych_guru)	CVE-2020-0127, CVE-2020-0169
Qi Zhao (@JHyrathon) and Guang Gong (@oldfresher) of Alpha Lab, Qihoo 360 Technology Co. Ltd.	CVE-2020-0216
Shuzhen Wang of Google	CVE-2020-0095
Sigmund Albert Gorski III and William Enck of North Carolina State University, and Haining Chen of Google	CVE-2020-0208, CVE-2020-0209, CVE-2020-0210
Steven Moreland of Google	CVE-2020-0118
Tim Pisaki of Google	CVE-2020-0115
V.E.O (@VYSEa) (一〇) of Ant Financial	CVE-2020-0184
Wei Wang of Google	CVE-2020-0121
Wenke Dou (email) and Guang Gong (@oldfresher) of Alpha Lab, Qihoo 360 Technology Co. Ltd.	CVE-2020-0186
Xuan Xing of Google	CVE-2020-0150, CVE-2020-0154, CVE-2020-0158, CVE-2020-0159, CVE-2020-0217
Yu Shan of Google	CVE-2020-0151
Yu-Cheng Lin (林禹成) (@AndroBugs)	CVE-2020-0215
Yuwei Zheng (郑玉伟) (@YuweiZheng101) of Bytedance Security Center	CVE-2020-0201
Zinuo Han of Alibaba Cloud Security Team	CVE-2020-0126, CVE-2020-0134, CVE-2020-0152, CVE-2020-0167, CVE-2020-0197, CVE-2020-0218

May

Researchers	CVEs
Andr. Ess	CVE-2020-0024
Arash Tohidi of Solita	CVE-2019-14042, CVE-2019-14043
Chong Wang (王冲) (weibo.com/csddl) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd.	CVE-2020-0101
Eugenia Lemberg of Google	CVE-2020-0103
Gengjia Chen ( @chengjia4574 ) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2019-14038, CVE-2019-14039, CVE-2020-0220
Ilja van Sprundel of IOActive	CVE-2020-0100
John Høegh-Omdal of Promon (https://promon.co)	CVE-2020-0096
Jun Yao (姚俊) (⁠@freeman) and Guang Gong (@oldfresher] of Alpha Lab, Qihoo 360 Technology Co. Ltd.	CVE-2020-3680
Kris Alder of Google	CVE-2020-0093
Matthew Daley	CVE-2020-0105, CVE-2020-0109
Michal Bednarski	CVE-2020-0098
Monk Avel	CVE-2020-3610
Svetoslav Ganov of Google	CVE-2020-0097
Thierry Boulord	CVE-2020-0092
Xiaobo Xiang; Guang Gong of Alpha Lab, Qihoo 360 Technology Co. Ltd	CVE-2020-0094
Yu-Cheng Lin (林禹成) (@AndroBugs)	CVE-2020-0110

April

Researchers	CVEs
aedla	CVE-2019-14131
Arash Tohidi	CVE-2019-14009, CVE-2020-0075, CVE-2020-0076, CVE-2020-0077
Bernardo Rufino and Edward Cunningham of Google	CVE-2020-0080
Chong Wang (王冲) (weibo.com/csddl) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd.	CVE-2019-10625, CVE-2020-0078, CVE-2020-0079
D.2.Y.P (d2yp_)	CVE-2019-10624
Dacheng Shao (email) and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2020-0067
Eric Biggers and Paul Crowley of Google	CVE-2019-2056
Gengjia Chen (@chengjia4574) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2020-0068
Jianqiang Zhao (jianqiangzhao)	CVE-2019-10620
Jianqiang Zhao (@jianqiangzhao) and pjf (weibo.com/jfpan) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2019-10556
Man Yue Mo of GitHub Security Lab	CVE-2020-0070, CVE-2020-0071, CVE-2020-0072, CVE-2020-0073
Michal Bednarski	CVE-2020-0082
Peter Park (peterpark)	CVE-2019-14021, CVE-2019-14018
Slava Makkaveev (email)	CVE-2019-10574
Tamir Zahavi-Brunner (@tamir_zb) of Zimperium zLabs Team	CVE-2019-14040, CVE-2019-14041
Zhihao Yao, Seyed Mohammadjavad Seyed Talebi, and Ardalan Amiri Sani of University of California, Irvine	CVE-2019-10547
Zili Liang of Alibaba UC Team	CVE-2020-0081

March

Researchers	CVEs
(avel)	CVE-2019-14072
Min Jang (@skensita)	CVE-2020-0047
Andrea Possemato (@_pox_) of IDEMIA / EURECOM and Yanick Fratantonio (@reyammer) of EURECOM	CVE-2020-0087
Arash Tohidi	CVE-2020-0010, CVE-2020-0011, CVE-2020-0012, CVE-2020-0042, CVE-2020-0043, CVE-2020-0044
Baozeng Ding (@sploving1)	CVE-2020-0066
Calum Hutton (Perspective Risk)	CVE-2020-0060
Carlo Di Dato of Advantio Ltd.	CVE-2020-0035
Chad Brubaker of Android Platform Security	CVE-2020-0052
Chong Wang (王冲) (weibo.com/csddl) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2020-0033, CVE-2020-0048, CVE-2019-10544, CVE-2019-10623
dex (Marcel Busch) of FAU Security Team, FAU Erlangen-Nuremberg	CVE-2019-10561
Edward Cunningham of Google	CVE-2020-0054, CVE-2020-0061
Eloi Sanfelix and Jordan Gruskovnjak of Blue Frost Security	CVE-2020-0041
Etienne Helluy of Lafont Universit´e de Lille	CVE-2019-14095
Feng Cao of Google	CVE-2020-0031
Gengjia Chen (@chengjia4574) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2019-10584, CVE-2020-0055, CVE-2020-0056, CVE-2020-0057, CVE-2020-0058, CVE-2020-0059
Hao Liu and Jianqiang Zhao of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2020-0045
Jann Horn of Google Project Zero	CVE-2019-13272
Joshua Steiner	CVE-2020-0051
Justin Gerhardt	CVE-2020-0062
Michael Specter	CVE-2019-2264
Niky1235 (@jiych_guru)	CVE-2020-0049
Oscar Shu of Google	CVE-2020-0029
Paul Hu of Google	CVE-2020-0036
Peter Park (peterpark)	CVE-2019-14026, CVE-2019-14027, CVE-2019-14028
Qi Zhao (@JHyrathon) and Guang Gong (@oldfresher) of Alpha Lab, Qihoo 360 Technology Co. Ltd.	CVE-2020-0050
Raul Siles, DinoSec	CVE-2020-0083
Richard Neal of Google	CVE-2020-0069
Ricky Wai of Google	CVE-2020-0084
Sulthan Alaudeen (@parallel_beings)	CVE-2019-14079
Tommy Chiu of Google	CVE-2020-0063
Will Coster of Google	CVE-2020-0053
Xuan Xing of Google	CVE-2020-0037, CVE-2020-0038, CVE-2020-0039
Zinuo Han(weibo.com/ele7enxxh) of Alibaba Cloud Security Team	CVE-2019-10592, CVE-2020-0046

February

Researchers	CVEs
Alex Epifano (email)	CVE-2020-0018
Colin Cross of Google	CVE-2020-0027
Gengjia Chen (@chengjia4574) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2020-0005
Gopi Palaniappan of Google	CVE-2020-0021
Guang Gong (@oldfresher) of Alpha Lab, Qihoo 360 Technology Co. Ltd.	CVE-2019-10567
Güliz Seray Tuncay of Google, from the University of Illinois at Urbana-Champaign, (http://tuncay2.web.engr.illinois.edu) (Güliz Tuncay) (email)	CVE-2019-2200
Jan Ruge of Secure Mobile Networking Lab	CVE-2020-0022
Lance Jiang and Moony Li of TrendMicro Mobile Security Research Team working with Trend Micro´s Zero Day Initiative	CVE-2019-14088
Maddie Stone of Google Project Zero	CVE-2020-0030
Matthew Daley	CVE-2020-0023
Ricky Wai of Google	CVE-2020-0014
Yohei Yukawa of Google	CVE-2020-0017

January

Researchers	CVEs
Evgenii Stepanov of Google	CVE-2019-10582, CVE-2019-10583, CVE-2020-0008
Jann Horn of Google Project Zero	CVE-2019-17666, CVE-2020-0009
Michal Bednarski	CVE-2020-0001
Mitch Phillips of Google	CVE-2020-0002
Pengfei Ding (丁鹏飞) of Huawei Mobile Security Lab	CVE-2019-10486, CVE-2019-10494, CVE-2019-10503
Rong Fan (@fanrong1992) and Simon Huang (@HuangShaomang) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2020-0004
Steven Moreland of Google	CVE-2020-0007
Xuan Xing of Google	CVE-2020-0006

2019

December

Researchers	CVEs
Alexander Bakker	CVE-2019-9465
Ashley Yeh of Google	CVE-2019-2220
Evgenii Stepanov of Google	CVE-2019-2226, CVE-2019-2227, CVE-2019-9468
Fenghao Xu and Kehuan Zhang of The Chinese University of Hong Kong	CVE-2019-2225
Güliz Seray Tuncay from University of Illinois at Urbana-Champaign and Google	CVE-2019-2221
Hao Liu and Jianqiang Zhao of IceSword Lab, Qihoo 360	CVE-2019-2217
Jianqiang Zhao (@jianqiangzhao) and pjf (weibo.com/jfpan) of IceSword Lab, Qihoo 360	CVE-2019-2304, CVE-2019-9470, CVE-2019-9471
Pratheesh P Narayanan (@Pratheesh_PPN)	CVE-2019-2232
Lee Harrison and Hayawardh Vijayakumar, Samsung Knox Security	CVE-2019-10513
Pengfei Ding (丁鹏飞) of Huawei	CVE-2019-10557
Ricky Wai of Google	CVE-2019-2218
Rubin Xu and Janis Danisevskis of Google	CVE-2019-2231
Stephan Zeisberg of Security Research Labs	CVE-2019-2228
Wei Wang of Google	CVE-2019-9464
Peter Park (peterpark)	CVE-2019-10536, CVE-2019-10537
Yu-Cheng Lin (林禹成) (@AndroBugs)	CVE-2019-2229

November

Researchers	CVEs
Austin Emmitt of NowSecure	CVE-2019-2205
Bo Zhang of Tencent Blade Team	CVE-2018-11266
Brandon Weeks of Google	CVE-2019-2199
Chong Wang (王冲)(weibo.com/csddl) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2019-2209
Daniel Kachakil of IOActive	CVE-2019-2196, CVE-2019-2198, CVE-2019-2211
derrek	CVE-2019-2321
Gengjia Chen (@chengjia4574) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2019-2206
gzobqq@gmail.com	CVE-2019-2213, CVE-2019-2214
Michal Bednarski	CVE-2019-2192, CVE-2019-2195
Seyed Mohammadjavad Seyed Talebi (mjavad)	CVE-2019-10520
Nagarjuna Kristam of Nvidia	CVE-2019-2036
Nick Finco of Google	CVE-2019-2210
Pengfei Ding (丁鹏飞) of Huawei	CVE-2019-2310
Qi Zhao (赵奇) (@JHyrathon) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2019-2207
Rong Fan (@fanrong1992) and Simon Huang (@HuangShaomang) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2019-2201
Royce D. Williams (@TychoTithonus)	CVE-2019-2233
Tom Craig of Loon	CVE-2019-2197
Wei Liu (刘炜) and Yongke Wang (王永科) (@Rudykewang) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室）	CVE-2019-2204, CVE-2019-2208
Xuan Xing of Google	CVE-2019-9467
Zinuo Han of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.	CVE-2019-2202, CVE-2019-2203

October

Researchers	CVEs
Dokyung Song (dokyungs@uci.edu)	CVE-2018-11902
Gengjia Chen (@chengjia4574) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2019-2297, CVE-2019-10563, CVE-2019-10566
Hao Chen and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd	CVE-2018-11934
Hui Peng (benquike@gmail.com) and Mathias Payer (mathias.payer@nebelwelt.net)	CVE-2018-19824
Huinian Yang (杨卉年) (@vmth6) and Chong Wang (王冲) (weibo.com/csddl) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2019-2184
Joe0x20 (digforfree)	CVE-2019-2247
Nightwatch Cybersecurity Research	CVE-2019-2114
Maddie Stone of Google Project Zero	CVE-2019-2215
Qi Zhao (@JHyrathon) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2019-2187
Satheesh Dabbiru, Om Krishna(omkrishna10@gmail.com), Tito Rodi, Shane Oatman, Krishna Eedula, Dome Pongmongkol, and Brian Melton-Grace of Microsoft Corp.	CVE-2019-2183
Sekshavali Dudekula of Google	CVE-2019-2110
syssec@kaist	CVE-2019-2289
Wen Guanxing of Pangu LAB	CVE-2019-2318
Zinuo Han (weibo.com/ele7enxxh) of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd.	CVE-2019-2185, CVE-2019-2186

September

Researchers	CVEs
Chi Fung Wong (@warenix)	CVE-2019-2103
Chong Wang (王冲) (weibo.com/csddl) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2019-10505
Cyrille Chatras of Orange Labs	CVE-2019-2174
derrek (@derrekr6)	CVE-2018-6240
Dzmitry Lukyanenka	CVE-2019-2124
gzobqq@gmail.com	CVE-2019-2181
heidada	CVE-2019-2258
Janis Danisevskis of Google	CVE-2019-2115
Jann Horn of Google Project Zero	CVE-2019-2177, CVE-2019-10529
Kostya Serebryany of Google, using libFuzzer+AddressSanitizer	CVE-2019-2108
Lee Campbell of Google	CVE-2019-2175
Mathieu Cunche, Célestin Matte, and Mathy Vanhoef	CVE-2019-10504
Michał Bednarski (michalbednarski)	CVE-2019-2123, CVE-2019-9254
Mitch Phillips of Google	CVE-2019-2176
Niky1235 (@jiych_guru)	CVE-2019-2179
Peter Pi of Tencent	CVE-2019-2324, CVE-2019-2325
Qi Zhao (@JHyrathon) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2019-2178
Stephan Zeisberg (stze) of Security Research Labs	CVE-2019-2180
Xuan Xing of Google	CVE-2017-17768

August

Researchers	CVEs
Chao Dai and Cusas of L.O. Team	CVE-2019-2129
Cláudio André (@clviper)	CVE-2019-2120
Cusas of L.O. Team	CVE-2019-2126
Evgenii Stepanov of Google	CVE-2019-2128
Fernando Miguel	CVE-2019-2122
Joshua Steiner	CVE-2019-2125, CVE-2019-2137
Kah Hin Lai, Danyang Wang, Sheng Xun Ong, and Hao Lee Yu of University of Minnesota	CVE-2019-2131
Michal Bednarski (michalbednarski)	CVE-2019-2121
Mitch Phillips of Google	CVE-2019-2127
Qi Zhao (@JHyrathon) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2019-2135
Steven Moreland of Google	CVE-2019-2136
Wei Liu (刘炜), Yongke Wang (王永科) (@Rudykewang) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室)	CVE-2019-2130
Xiling Gong of Tencent Blade Team	CVE-2019-2252, CVE-2019-2279,CVE-2019-10538, CVE-2019-10539, CVE-2019-10540
Xuan Xing of Google	CVE-2019-2133, CVE-2019-2134

July

Researchers	CVEs
Alex Abfalter of Google	CVE-2019-2111
Chong Wang (王冲) (weibo.com/csddl) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2019-2105
Cusas of L.O. Team	CVE-2019-2113
Evgenii Stepanov of Google	CVE-2019-2112
Hao Chen (@flankersky)	CVE-2019-2346
Janis Danisevskis of Google	CVE-2019-2119
Kostya Serebryany of Google, using libFuzzer and AddressSanitizer	CVE-2019-2106, CVE-2019-2107
Pengfei Ding (丁鹏飞) of Huawei	CVE-2019-2305
Peter Pi of Tencent	CVE-2019-2326
Qi Zhao (@JHyrathon) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2019-2118
Steven Moreland of Google	CVE-2019-2104
Tao Sauvage of IOActive	CVE-2019-2117
Xuan Xing of Google	CVE-2019-2116

June

Researchers	CVEs
Andrey Konovalov of Google	CVE-2019-2101
Cusas of L.O. Team	CVE-2019-2094
Dacheng Shao (email) and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2019-2096
Matt Beaver and Erik Peterson of Microsoft Corp.	CVE-2019-2102
Qi Zhao (@JHyrathon) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2019-2099
Wei Liu (刘炜), Yongke Wang (王永科) (@Rudykewang) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室)	CVE-2019-2097
Wyatt Riley of Google	CVE-2018-9526
Xiling Gong of Tencent Blade Team	CVE-2019-2287

May

Researchers	CVEs
Chong Wang (weibo.com/csddl) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2019-2053
Cusas of L.O. Team	CVE-2019-2044
derrek (@derrekr6)	CVE-2018-6243, CVE-2018-13898, CVE-2018-13908
Evgenii Stepanov of Google	CVE-2019-2049
Jann Horn of Google Project Zero	CVE-2019-2054
Ji Zhang (@opc0nt7) and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2019-2050
Joshua Steiner	CVE-2019-2043
Pengfei Ding (丁鹏飞) of Huawei	CVE-2018-11955
Wei Liu (刘炜) and Yongke Wang (王永科) (@Rudykewang) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室)	CVE-2019-2045, CVE-2019-2046, CVE-2019-2047, CVE-2019-2051, CVE-2019-2052
Wen Guanxing of Pangu LAB	CVE-2018-13910
Xiling Gong of Tencent Blade Team	CVE-2018-5912, CVE-2019-2256

April

Researchers	CVEs
Andreas Burtzlaff	CVE-2019-2037
C0RE Team	CVE-2018-11937
Cody Schuffelen of Google	CVE-2019-2030
Dokyung Song, Dipanjan Das, and Felicitas Hetzelt	CVE-2018-11902
Gengjia Chen ( @chengjia4574)	CVE-2018-5855
Gengjia Chen (@chengjia4574) and pjf (weibo.com/jfpan) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2018-11905
Hao Chen ( @flankersky)	CVE-2018-11953
Hao Chen ( @flankersky) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2018-11904
Hao Liu and Jianqiang Zhao of IceSword Lab, Qihoo 360	CVE-2019-2032
Mathieu Cunche, Célestin Matte, INSA-Lyon, Inria, and Mathy Vanhoef, imec-DistriNet, KU Leuven	CVE-2018-11291
NCC Group	CVE-2018-11976
Pengfei Ding (丁鹏飞) of Huawei	CVE-2018-11940
Qi Zhao ( @JHyrathon) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2019-2027, CVE-2019-2034
Roman Mihálik, Bratislava	CVE-2019-2041
Scott Bauer ( email)	CVE-2017-17772
Suresh Sivaraman of Ittiam	CVE-2019-2028
Wenke Dou (email), Chi Zhang (email), and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2019-2029, CVE-2019-2033
Xuan Xing of Google	CVE-2019-2031, CVE-2019-2035, CVE-2019-2040
Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2019-2038, CVE-2019-2039

March

Researchers	CVEs
Adrian Tang of Columbia University (CLKSCREW paper)	CVE-2017-8252
Dacheng Shao (email) and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2019-2008
Hongli Han (@hexb1n) and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2019-2025
Jann Horn of Google Project Zero	CVE-2019-2023
Jianjun Dai ( @jioun_dai) and Guang Gong ( @oldfresher) of 360 Alpha Team	CVE-2019-2009
Mark Brand of Google Project Zero	CVE-2019-2011
Niky1235 ( @jiych_guru)	CVE-2019-2019
Qi Zhao ( @JHyrathon) and Guang Gong ( @oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2019-2017
Wangtao (neobyte) of Alibaba Orion Security Lab	CVE-2019-2004
Xiangqian Zhang ( @h3rb0x), m4bln, and Huiming Liu of Tencent Security Xuanwu Lab	CVE-2019-2003
Xuan Xing of Google	CVE-2018-9563, CVE-2018-9564, CVE-2019-2012, CVE-2019-2013, CVE-2019-2014, CVE-2019-2015, CVE-2019-2022
Yong Wang (王勇) ( @ThomasKing2014) of Alibaba Security	CVE-2019-2016
Yongke Wang (王永科) ( @Rudykewang) and Xiangqian Zhang (张向前) (@h3rb0x) of Tencent Security Xuanwu Lab	CVE-2019-2010
Zach Riggle ( @ebeip90) of the Android Security Team	CVE-2019-2007
Zinuo Han ( weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2018-9561, CVE-2019-2020, CVE-2019-2021

February

Researchers	CVEs
Andr. Ess	CVE-2019-1994
Chong Wang (weibo.com/csddl) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2019-1993
derrek (@derrekr6)	CVE-2018-11289, CVE-2018-11820, CVE-2018-11938, CVE-2018-11864
Dzmitry Lukyanenka	CVE-2019-1995
Hongli Han (@hexb1n) and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2018-6268, CVE-2018-6271
Jann Horn of Google Project Zero	CVE-2019-1999, CVE-2019-2000
Leon Scroggins of Google	CVE-2019-1986, CVE-2019-1987, CVE-2019-1988
Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2018-6267
Rich Cannings of Google	CVE-2019-1997
Tencent Blade Team	CVE-2018-5839
Xuan Xing of Google	CVE-2018-11262, CVE-2018-11275
Yongke Wang (王永科) (@Rudykewang) and Xiangqian Zhang (张向前) (@h3rb0x) of Tencent Security Xuanwu Lab	CVE-2019-1996
Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2019-1991, CVE-2019-1992

January

Researchers	CVEs
Chong Wang (weibo.com/csddl) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2018-9589
D2.Y.P of NON Team	CVE-2018-9594
Dzmitry Lukyanenka	CVE-2018-9587
Hanxiang Wen and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2018-6241
Jann Horn of Google Project Zero	CVE-2018-17182, CVE-2018-18281
Maddie Stone of Google	CVE-2018-9586
Niky1235 (@jiych_guru)	CVE-2018-9584
Ricky Wai of Google	CVE-2018-9582
Yongke Wang (王永科) (@Rudykewang) and Xiangqian Zhang (张向前) (@h3rb0x) of Tencent Security Xuanwu Lab	CVE-2018-9585, CVE-2018-9588
Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2018-9583, CVE-2018-9590, CVE-2018-9591, CVE-2018-9592, CVE-2018-9593

2018

In 2018, the security acknowledgements are listed by month. In prior years, acknowledgements were listed together.

December

Researchers	CVEs
Baozeng Ding (@sploving1)	CVE-2017-18320
Daniel Micay (@DanielMicay)	CVE-2018-9567
Hao Chen and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2018-9557
Joydeep Mitra and Venkatesh-Prasad Ranganath of Ghera project at Kansas State University, USA	CVE-2018-9548
Mingjian Zhou (周明建) ( @Mingjian_Zhou) of C0RE Team	CVE-2018-9547
Newroot (@newroot)	CVE-2018-9560
Scott Bauer (@ScottyBauer1)	CVE-2018-9555, CVE-2018-9558, CVE-2018-9566
Yong Wang (王勇) (@ThomasKing2014) of Alibaba Inc.	CVE-2018-9568
Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2018-9549, CVE-2018-9552, CVE-2018-9553, CVE-2018-9562

November

Researchers	CVEs
Amar Menezes of MWR Labs	CVE-2018-9524
Elphet and Gong Guang of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2018-9569, CVE-2018-9570, CVE-2018-9573, CVE-2018-9576, CVE-2018-9577
En He (@heeeeen4x) and Bo Liu of MS509Team (www.ms509.com)	CVE-2018-9457
Joshua Laney of Deja vu Security	CVE-2018-9542
Michał Bednarski	CVE-2018-9522, CVE-2018-9523
Niky1235 (@jiych_guru)	CVE-2018-9347
Tamir Zahavi-Brunner (@tamir_zb) of Zimperium zLabs Team	CVE-2018-9539
Xiaobo Xiang of IIE; Gong Guang of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2018-9571, CVE-2018-9572, CVE-2018-9574, CVE-2018-9575
Yongke Wang (@Rudykewang) and Xiangqian Zhang (@h3rb0x) of Tencent Security Xuanwu Lab	CVE-2018-9540, CVE-2018-9541
Zinuo Han(weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2018-9527, CVE-2018-9544, CVE-2018-9545, CVE-2018-9578

October

Researchers	CVEs
Abhishek Sidharthan (Amrita School of Engineering) and Pratheesh P Narayanan (Sree Narayana Gurukulam College of Engineering)	CVE-2018-9452
Chong Wang (weibo.com/csddl) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2018-9503, CVE-2018-9505
Daniel Kachakil, Senior Security Consultant, IOActive	CVE-2018-9493, CVE-2018-9546
Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2018-9490
Jann Horn of Google Project Zero	CVE-2018-9514, CVE-2018-9515
Jianjun Dai (@Jioun_dai) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd	CVE-2017-13283
Michał Bednarski	CVE-2018-9492
Niky1235 (@jiych_guru)	CVE-2018-9473
Pengfei Ding (丁鹏飞) of Huawei Mobile Security Lab (华为移动安全实验室)	CVE-2018-9506, CVE-2018-9507
Raymond Wang	CVE-2018-9501
Stephan Zeisberg of Security Research Labs	CVE-2018-9497
Tamir Zahavi-Brunner (@tamir_zb) of Zimperium zLabs Team	CVE-2018-9499
Yongke Wang (@Rudykewang) and Xiangqian Zhang (@h3rb0x) of Tencent Security Xuanwu Lab	CVE-2018-9502, CVE-2018-9508, CVE-2018-9509, CVE-2018-9510
Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2018-9476, CVE-2018-9498, CVE-2018-9504

September

Researchers	CVEs
Baozeng Ding (@sploving1), Chengming Yang, and Yang Song of Alibaba Mobile Security Group	CVE-2018-9517
Chong Wang (weibo.com/csddl) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2018-9480, CVE-2018-9481, CVE-2018-9482, CVE-2018-9485
Cusas of L.O. Team	CVE-2018-9440, CVE-2018-9467
Daniel Kachakil, Senior Security Consultant, IOActive	CVE-2018-9468
En He (@heeeeen4x) and Bo Liu of MS509Team (ms509.com)	CVE-2018-9475
Hector Cuesta Garcia (@HectorCuesta) of Innotec System	CVE-2018-9470
Hongli Han (@hexb1n) and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2018-11261
Jann Horn of Google Project Zero	CVE-2018-9488
Jianjun Dai (@jioun_dai) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2018-9478, CVE-2018-9479
Jianqiang Zhao (@jianqiangzhao) and pjf (weibo.com/jfpan) of IceSword Lab, Qihoo 360	CVE-2018-9516
M3, Inc.	CVE-2018-9469
Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2018-11816
Pengfei Ding (丁鹏飞) of Huawei Mobile Security Lab (华为移动安全实验室)	CVE-2018-9519
Tamir Zahavi-Brunner (@tamir_zb) of Zimperium zLabs Team	CVE-2018-9411
Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2018-9471, CVE-2018-9474, CVE-2018-9483, CVE-2018-9484, CVE-2018-9486

August

Researchers	CVEs
Chao Dai @ L.O. Team	CVE-2018-9437
Chong Wang of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2018-9436, CVE-2018-9448, CVE-2018-9454, CVE-2018-9455
Dinesh Venkatesan (@malwareresearch) of Symantec	CVE-2017-13295
Dzmitry Lukyanenka	CVE-2018-9459, CVE-2018-9461
En He (@heeeeen4x) and Bo Liu of MS509Team	CVE-2017-13242, CVE-2018-9457
Francesco Pinci	CVE-2018-9447
Jann Horn of Google Project Zero	CVE-2018-9445
Joshua Steiner of Introne Apps	CVE-2017-13322
Scott Bauer (@ScottyBauer1)	CVE-2018-9441
Tencent Blade Team	CVE-2017-18306, CVE-2017-18307
Tong Lin (segfault5514@gmail.com) and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2018-9439
V.E.O (@VYSEa) of Mobile Security Research Team, Trend Micro	CVE-2018-9444
Zinuo Han of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2018-9435, CVE-2018-9446, CVE-2018-9449, CVE-2018-9450, CVE-2018-9451, CVE-2018-9453

July

Researchers	CVEs
Baozeng Ding (丁保增) (@sploving) of Pandora Lab, Ali Security	CVE-2018-9422
Billy Lau of Android Security Research	CVE-2018-9416
Cusas of L.O. Team	CVE-2018-9412
En He (@heeeeen4x) and Bo Liu of MS509Team	CVE-2018-9432, CVE-2018-9414
Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2018-9433
Jann Horn of Google Project Zero	CVE-2018-9434
Jianjun Dai (@Jioun_dai) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2018-9418, CVE-2018-9419, CVE-2018-9413, CVE-2018-9365
Jianqiang Zhao (@jianqiangzhao) and pjf (weibo.com/jfpan) of IceSword Lab, Qihoo 360	CVE-2018-9417
Nathan Crandall (@natecray) of Tesla's Product Security Team	CVE-2017-0606
niky1235 (jiych.guru@gmail.com, @jiych_guru)	CVE-2018-9423
Pengfei Ding (丁鹏飞), Chenfu Bao (包沉浮), Lenx Wei (韦韬) of Baidu X-Lab (百度安全实验室)	CVE-2017-15851
Scott Bauer (@ScottyBauer1)	CVE-2018-9430
Tamir Zahavi-Brunner (@tamir_zb) of Zimperium zLabs Team	CVE-2018-9411
Tencent Blade Team	CVE-2018-9421, CVE-2018-9420
Yonggang Guo (@guoygang) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2018-9415
Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2018-9410, CVE-2018-9424, CVE-2018-9431

June

Researchers	CVEs
Baozeng Ding (丁保增) (@sploving1) of Pandora Lab, Ali Security	CVE-2018-5857, CVE-2018-9389
Daniel Kachakil of IOActive	CVE-2018-9375
derrek (@derrekr6)	CVE-2017-6290, CVE-2017-6292, CVE-2017-6294
Elphet and Gong Guang of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2018-9348
Hao Chen and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2018-5899
Jianjun Dai (@Jioun_dai) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd	CVE-2018-9381, CVE-2018-9358, CVE-2018-9359, CVE-2018-9360, CVE-2018-9361, CVE-2018-9357, CVE-2018-9356
joe0x20@gmail.com	CVE-2018-5898
Jose Martinez	CVE-2018-5146
Julien Thomas (@Julien_Thomas) of Protektoid.com	CVE-2018-9374
Michał Bednarski	CVE-2018-9339
Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2018-9344
Niky1235 (@jiych_guru)	CVE-2017-13230, CVE-2018-9347
Pengfei Ding (丁鹏飞), Chenfu Bao (包沉浮), and Lenx Wei (韦韬) of Baidu X-Lab (百度安全实验室)	CVE-2018-5832, CVE-2018-5896, CVE-2018-5897
Qing Dong of 360 Beaconlab	CVE-2018-9386
Scott Bauer (@ScottyBauer1)	CVE-2018-9388, CVE-2018-9355, CVE-2018-9380
Stephan Zeisberg of Security Research Labs	CVE-2018-9350, CVE-2018-9352, CVE-2018-9353, CVE-2018-9341
Tencent Blade Team	CVE-2018-9345, CVE-2018-9346
Yonggang Guo (@guoygang) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2017-0564
Yuan-Tsung Lo of C0RE Team	CVE-2017-13079, CVE-2017-13081
华为移动安全实验室的钱育波	CVE-2018-9363
Zinuo Han of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2018-9340, CVE-2018-9338, CVE-2018-9378

May

Researchers	CVEs
Corinna Vinschen	CVE-2018-5853
derrek (@derrekr6)	CVE-2017-6293, CVE-2018-6246
Gengjia Chen (@chengjia4574) and pjf of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2017-18153
Hanxiang Wen and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2017-18154
Hongli Han (@HexB1n) and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2018-6254
Joshua Steiner of Introne Apps	CVE-2017-13322
Michał Bednarski	CVE-2017-13310, CVE-2017-13311
Pengfei Ding (丁鹏飞), Chenfu Bao (包沉浮), and Lenx Wei (韦韬) of Baidu X-Lab (百度安全实验室)	CVE-2017-15857, CVE-2018-5852
Zinuo Han of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd	CVE-2017-13321, CVE-2017-13318, CVE-2017-13323, CVE-2017-13319, CVE-2017-13317

April

Researchers	CVEs
Billy Lau of Google	CVE-2017-13305
Chong Wang of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd	CVE-2017-13287
Chong Wang and Zinuo Han of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd	CVE-2017-13289, CVE-2017-13286
Cusas @ Huawei L.O. Team	CVE-2017-13279
Daxing Guo of Tencent's Xuanwu Lab	CVE-2017-13292, CVE-2017-13303
Dinesh Venkatesan (@malwareresearch) of Symantec	CVE-2017-13295
Elphet and Gong Guang of Alpha Team, Qihoo 360 Technology Co. Ltd	CVE-2017-13276
En He (@heeeeen4x) and Bo Liu of MS509Team	CVE-2017-13294
Eric Leong (@ericwleong)	CVE-2017-13301
Hao Chen and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2018-3596
Haosheng Wang (@gnehsoah)	CVE-2017-13280
Jean-Baptiste Cayrou (@jbcayrou)	CVE-2017-13284
Jianjun Dai (@Jioun_dai) and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd	CVE-2017-13291, CVE-2017-13283, CVE-2017-13282, CVE-2017-13281, CVE-2017-13267
Patrick Delvenne (@wintzx) of Orange Labs	CVE-2018-3584
Pengfei Ding (丁鹏飞), Chenfu Bao (包沉浮), Lenx Wei (韦韬) of Baidu X-Lab (百度安全实验室)	CVE-2017-13306, CVE-2017-13290, CVE-2017-15837
Tencent Blade Team	CVE-2017-15853
Vasily Vasiliev	CVE-2017-13297
Weichao Sun of Alibaba Inc (@sunblate)	CVE-2017-13277
Yang Dai and Yu Pan of Vulpecker Team, Qihoo 360 Technology Co. Ltd	CVE-2017-13304
Yonggang Guo (@guoygang) of IceSword Lab, Qihoo 360 Technology Co. Ltd	CVE-2017-8269, CVE-2017-13307, CVE-2018-5826
Zhongwen & Chao Dai @ Huawei L.O. Team	CVE-2017-13274
Zinuo Han of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd	CVE-2017-13288, CVE-2017-13298, CVE-2017-13296, CVE-2017-13299, CVE-2017-13275, CVE-2017-13285

March

Researchers	CVEs
Billy Lau of Google	CVE-2017-14879
Daniel Micay of Copperhead Security	CVE-2017-13265
Dacheng Shao and Mingjian Zhou (周明建)	CVE-2017-6288
Elphet and Gong Guang of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2017-13254
Jake Corina of Shellphish Grill Team	CVE-2018-3560
Jianjun Dai (@Jioun_dai) and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2017-13266, CVE-2017-13256, CVE-2017-13255
Julian Rauchberger	CVE-2017-13258
Hongli Han (@hexb1n), Dacheng Shao, and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2017-6287
Hongli Han (@HexB1n) and Mingjian Zhou (周明建)(@Mingjian_Zhou) of C0RE Team	CVE-2017-6286, CVE-2017-6285, CVE-2017-6281
Pengfei Ding (丁鹏飞), Chenfu Bao (包沉浮), Lenx Wei (韦韬) of Baidu X-Lab (百度安全实验室)	CVE-2017-13262, CVE-2017-13261, CVE-2017-13260, CVE-2017-11029, CVE-2017-15814
Peter Pi of Tencent Security Platform Department	CVE-2017-13269
Sang Shin Jung of Deja vu Security	CVE-2017-13270
Tamir Zahavi-Brunner (@tamir_zb) of Zimperium zLabs Team	CVE-2017-13253
Vasily Vasiliev	CVE-2017-13249, CVE-2017-13248, CVE-2017-13264
Wish Wu (@wish_wu 吴潍浠此彼) of Ant-financial Light-Year Security Lab	CVE-2017-13259, CVE-2017-13272
Yaoguang Chen of Ant-financial Light-Year Security Lab (蚂蚁金服巴斯光年安全实验室)	CVE-2017-13257, CVE-2017-13268
Yonggang Guo (@guoygang) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2017-13271
ZhangBo of Tencent Security Platform Department	CVE-2017-18069
Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd.	CVE-2017-13252, CVE-2017-13251, CVE-2018-3561

February

Researchers	CVEs
Aaron Willey, autoprime (@utoprime), and Tyler Montgomery (@tylerfixer) of Team Codefire	CVE-2017-13238
Cusas (华为公司的cusas)	CVE-2017-13235
Elphet and Gong Guang of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2017-13229
En He (@heeeeen4x) and Bo Liu of MS509Team	CVE-2017-13242
Gal Beniamini of Google	CVE-2017-13236
Hao Chen and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2017-13245
Hongli Han (@HexB1n), Dacheng Shao and Mingjian Zhou (@Mingjian_Zhou) of C0RE Team	CVE-2017-6258
Hongli Han (@HexB1n), Mingjian Zhou (@Mingjian_Zhou) of C0RE Team	CVE-2017-17767, CVE-2017-6279
Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2017-13241, CVE-2017-13231
Nightwatch Cybersecurity Research	CVE-2017-13243
Niky1235 (@jiych_guru)	CVE-2017-13230, CVE-2017-13234
Outware	CVE-2017-13239
Qidan He (@flanker_hqd) of PDD Security Team	CVE-2017-13246
Xiling Gong of Tencent Security Platform Department	CVE-2017-15852
Yonggang Guo (@guoygang) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2017-13273
ZhangBo of Tencent Security Platform Department	CVE-2015-9016
Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd.	CVE-2017-13232

January

Researchers	CVEs
Adong Zhang (张阿东), Chao Liu (刘超), and Jinguang Dong (董金光)	CVE-2017-13215
Amar Menezes of MWR Labs	CVE-2017-13212
Andy Tyler (@ticarpi) of e2e-assure	CVE-2017-0846
Baozeng Ding (@sploving), Chengming Yang, and Yang Song of Pandora Lab, Ali Security	CVE-2017-13222, CVE-2017-13220
Billy Lau of Google	CVE-2017-14879
Cameron Gutman	CVE-2017-13214
Chi Zhang and Mingjian Zhou (@Mingjian_Zhou) of C0RE Team	CVE-2017-13178, CVE-2017-13179
Gal Beniamini of Google	CVE-2017-13209
Haosheng Wang (@gnehsoah)	CVE-2017-13198
Hongli Han (@HexB1n) and Mingjian Zhou (@Mingjian_Zhou) of C0RE Team	CVE-2017-13183, CVE-2017-13180
Hongli Han (@HexB1n), Dacheng Shao, and Mingjian Zhou (@Mingjian_Zhou) of C0RE Team	CVE-2017-13194
Max Moroz of Google	CVE-2017-13224
Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team	CVE-2017-13184, CVE-2017-13201
Niky1235 (@jiych_guru)	CVE-2017-0855, CVE-2017-13195, CVE-2017-13181
tintinweb	CVE-2017-13208
Tongxin Li and Xinhui Han of Peking University; Luyi Xing, Nan Zhang, Xueqiang Wang, and XiaoFeng Wang of Indiana University Bloomington; Xiaolong Bai of Tsinghua University; and Kai Chen of IIE, Chinese Academy of Sciences	CVE-2017-13176
V.E.O (@VYSEa) of Mobile Threat Response Team, Trend Micro	CVE-2017-13196, CVE-2017-13186
Wolfu (付敬贵) of Tencent Security Platform Department	CVE-2017-13219, CVE-2017-13207
Xuan Xing of Google	CVE-2017-13217
Yangkang (@dnpushme) of Qihoo360 Qex Team	CVE-2017-13200
Yongke Wang (@Rudykewang) and Yuebin Sun of Tencent's Xuanwu Lab	CVE-2017-13202
Yuan-Tsung Lo of C0RE Team	CVE-2017-13213, CVE-2017-13221
Yu Pan and Yang Dai of Vulpecker Team, Qihoo 360 Technology Co. Ltd.	CVE-2017-0869
Zinuo Han of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2017-13206, CVE-2017-13188, CVE-2017-13185

2017

Researcher	CVEs
ADlab of Venustech	CVE-2017-0630
Alexander Potapenko of Google Dynamic Tools team	CVE-2017-0537
Alexandru Blanda	CVE-2017-0390
Amir Cohen of Ben Gurion University Cyber Lab	CVE-2017-0650
Ao Wang (@ArayzSegment) of Pangu Team	CVE-2017-0691, CVE-2017-0700
Aravind Machiry of Shellphish Grill Team, University of California, Santa Barbara	CVE-2017-0865
Dr. Asaf Shabtai of Ben Gurion University Cyber Lab	CVE-2017-0650
Baozeng Ding (@sploving1) of Alibaba Mobile Security Group	CVE-2017-0463, CVE-2017-0506, CVE-2017-0711, CVE-2017-0741, CVE-2017-0742, CVE-2017-0751, CVE-2017-0796, CVE-2017-0798, CVE-2017-0800, CVE-2017-0827, CVE-2017-0843, CVE-2017-0864, CVE-2017-9703, CVE-2017-9708, CVE-2017-11000, CVE-2017-11059, CVE-2017-13170
Ben Actis (@Ben_RA)	CVE-2016-8461
Ben Seri of Armis, Inc.	CVE-2017-0781, CVE-2017-0782, CVE-2017-0783, CVE-2017-0785
Billy Lau of Android Security	CVE-2017-0335, CVE-2017-0336, CVE-2017-0338, CVE-2017-0460, CVE-2017-8263, CVE-2017-9682, CVE-2017-13162
Bo Liu of MS509Team	CVE-2017-0490, CVE-2017-0601, CVE-2017-0639, CVE-2017-0645, CVE-2017-0784, CVE-2017-11042
Chao Yang of Alibaba Mobile Security Group	CVE-2016-10280, CVE-2016-10281, CVE-2017-0565
Chenfu Bao (包沉浮) of Baidu X-Lab (百度安全实验室)	CVE-2016-8417, CVE-2016-10236, CVE-2017-0728, CVE-2017-0738, CVE-2017-0766, CVE-2017-0794, CVE-2017-9681, CVE-2017-9684, CVE-2017-9693, CVE-2017-9694, CVE-2017-9696, CVE-2017-9702, CVE-2017-9715, CVE-2017-9717, CVE-2017-9720, CVE-2017-11001, CVE-2017-10999, CVE-2017-11057, CVE-2017-11060, CVE-2017-11061, CVE-2017-11064, CVE-2017-11089, CVE-2017-11090
Chengming Yang of Alibaba Mobile Security Group	CVE-2016-10280, CVE-2016-10281, CVE-2017-0463, CVE-2017-0506, CVE-2017-0565, CVE-2017-0711, CVE-2017-0741, CVE-2017-0742, CVE-2017-0751, CVE-2017-0796, CVE-2017-0798, CVE-2017-0800, CVE-2017-0827, CVE-2017-0843, CVE-2017-0864, CVE-2017-9708, CVE-2017-11000, CVE-2017-11059, CVE-2017-13170
Chenxiong Qian of Georgia Tech	CVE-2017-0860
Chi Zhang of C0RE Team	CVE-2017-0666, CVE-2017-0681, CVE-2017-0684, CVE-2017-0765, CVE-2017-0836, CVE-2017-0857, CVE-2017-0880, CVE-2017-13166
Chiachih Wu (@chiachih_wu) of C0RE Team	CVE-2016-8425, CVE-2016-8426, CVE-2016-8430, CVE-2016-8431, CVE-2016-8432, CVE-2016-8449, CVE-2016-8435, CVE-2016-8480, CVE-2016-8481, CVE-2016-8482, CVE-2017-0383, CVE-2017-0384, CVE-2017-0385, CVE-2017-0398, CVE-2017-0400, CVE-2017-0401, CVE-2017-0402, CVE-2017-0428, CVE-2017-0429, CVE-2017-0435, CVE-2017-0436, CVE-2017-0444, CVE-2017-0448
Chong Wang of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2017-0758
Cong Zheng (@shellcong) of Palo Alto Networks	CVE-2017-0752
Constantinos Patsakis of University of Piraeus	CVE-2017-0807
Cusas (华为公司的cusas)	CVE-2017-0870
Dacheng Shao of C0RE Team	CVE-2017-0483, CVE-2017-0739, CVE-2017-0769, CVE-2017-0801
Daniel Dakhno	CVE-2017-0420
Daniel Micay of Copperhead Security	CVE-2017-0397, CVE-2017-0405, CVE-2017-0410, CVE-2017-0826, CVE-2017-13160
Daxing Guo (@freener0) of Xuanwu Lab, Tencent	CVE-2017-0386, CVE-2017-0553, CVE-2017-0585, CVE-2017-0706
derrek (@derrekr6)	CVE-2016-8413, CVE-2016-8477, CVE-2017-0392, CVE-2017-0521, CVE-2017-0531, CVE-2017-0576, CVE-2017-8260
Di Shen (@returnsme) of KeenLab (@keen_lab), Tencent	CVE-2016-8412, CVE-2016-8427, CVE-2016-8444, CVE-2016-10287, CVE-2017-0334, CVE-2017-0403, CVE-2017-0427, CVE-2017-0456, CVE-2017-0457, CVE-2017-0525, CVE-2017-8265
donfos (Aravind Machiry) of Shellphish Grill Team, UC Santa Barbara	CVE-2016-5349, CVE-2016-8448, CVE-2016-8470, CVE-2016-8471, CVE-2016-8472
Dzmitry Lukyanenka	CVE-2017-0414, CVE-2017-0703, CVE-2017-0808, CVE-2017-13157, CVE-2017-13158, CVE-2017-13159
Ecular Xu (徐健) of Trend Micro	CVE-2017-0599, CVE-2017-0635, CVE-2017-0641, CVE-2017-0643, CVE-2017-0859
Efthimios Alepis of University of Piraeus	CVE-2017-0807
Elphet of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2017-0692, CVE-2017-0694, CVE-2017-0771, CVE-2017-0774, CVE-2017-0775
En He (@heeeeen4x) of MS509Team	CVE-2017-0394, CVE-2017-0490, CVE-2017-0601, CVE-2017-0639, CVE-2017-0645, CVE-2017-0784, CVE-2017-11042
Eric Lafortune of GuardSquare	CVE-2017-13156
Ethan Yonker of Team Win Recovery Project	CVE-2017-0493
Fang Chen of Sony Mobile Communications Inc.	CVE-2017-0481
Frank Liberato of Chrome	CVE-2017-0409
Gal Beniamini of Project Zero	CVE-2017-0411, CVE-2017-0412, CVE-2017-0561, CVE-2017-0569 CVE-2017-0570, CVE-2017-0571, CVE-2017-0572
Gengjia Chen (@chengjia4574) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2016-8464, CVE-2016-10285, CVE-2016-10288, CVE-2016-10290, CVE-2016-10294, CVE-2016-10295, CVE-2016-10296, CVE-2017-0329, CVE-2017-0332, CVE-2017-0432, CVE-2017-0434, CVE-2017-0446, CVE-2017-0447, CVE-2017-0500, CVE-2017-0501, CVE-2017-0502, CVE-2017-0503, CVE-2017-0509, CVE-2017-0524, CVE-2017-0529, CVE-2017-0536, CVE-2017-0566, CVE-2017-0573, CVE-2017-0581, CVE-2017-0616, CVE-2017-0617, CVE-2017-0624, CVE-2017-0649, CVE-2017-0744, CVE-2017-6426, CVE-2017-8243, CVE-2017-8244, CVE-2017-8266, CVE-2017-8270, CVE-2017-9691, CVE-2017-10997
Godzheng (郑文选 @VirtualSeekers) of Tencent PC Manager	CVE-2017-0602, CVE-2017-0646
Google WebM Team	CVE-2017-0393
Gregory Vishnepolsky of Armis, Inc.	CVE-2017-0781, CVE-2017-0782, CVE-2017-0783, CVE-2017-0785
Guang Gong (龚广) (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2016-8415, CVE-2016-8419, CVE-2016-8420, CVE-2016-8421, CVE-2016-8454, CVE-2016-8455, CVE-2016-8456, CVE-2016-8457, CVE-2016-8465, CVE-2016-8476, CVE-2016-10283, CVE-2017-0387, CVE-2017-0415, CVE-2017-0437, CVE-2017-0438, CVE-2017-0439, CVE-2017-0441, CVE-2017-0442, CVE-2017-0443, CVE-2017-0453, CVE-2017-0454, CVE-2017-0461, CVE-2017-0464, CVE-2017-0547, CVE-2017-0567, CVE-2017-0574, CVE-2017-0575, CVE-2017-0577, CVE-2017-0580, CVE-2017-0584, CVE-2017-0692, CVE-2017-0694, CVE-2017-0727, CVE-2017-0748, CVE-2017-0771, CVE-2017-0774, CVE-2017-0775, CVE-2017-0786, CVE-2017-0787, CVE-2017-0788, CVE-2017-0789, CVE-2017-0790, CVE-2017-0791, CVE-2017-0792, CVE-2017-0825, CVE-2017-6424, CVE-2017-14904
Guangdong Bai of Singapore Institute of Technology (SIT)	CVE-2017-0496
Güliz Seray Tuncay of the University of Illinois at Urbana-Champaign	CVE-2017-0593
Guo Haoran of King Team	CVE-2017-13172
Hanxiang Wen of C0RE Team	CVE-2017-0400, CVE-2017-0418, CVE-2017-0479, CVE-2017-0480, CVE-2017-0665, CVE-2017-0681, CVE-2017-0737, CVE-2017-14904
Hao Chen of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2016-8415, CVE-2016-8419, CVE-2016-8420, CVE-2016-8421, CVE-2016-8454, CVE-2016-8455, CVE-2016-8456, CVE-2016-8457, CVE-2016-8465, CVE-2016-8476, CVE-2016-10283, CVE-2017-0437, CVE-2017-0438, CVE-2017-0439, CVE-2017-0441, CVE-2017-0442, CVE-2017-0443, CVE-2017-0453, CVE-2017-0454, CVE-2017-0461, CVE-2017-0464, CVE-2017-0567, CVE-2017-0574, CVE-2017-0575, CVE-2017-0577, CVE-2017-0580, CVE-2017-0584, CVE-2017-0748, CVE-2017-0786, CVE-2017-0787, CVE-2017-0788, CVE-2017-0789, CVE-2017-0790, CVE-2017-0791, CVE-2017-0792, CVE-2017-0825, CVE-2017-6424
Hao Qin of Security Research Lab, Cheetah Mobile	CVE-2017-11056
Hiroki Yamamoto of Sony Mobile Communications Inc.	CVE-2017-0481
Hongli Han (@HexB1n) of C0RE Team	CVE-2017-0384, CVE-2017-0385, CVE-2017-0731, CVE-2017-0739, CVE-2017-13154, CVE-2017-6276
hujianfei of Qihoo360 Qex Team	CVE-2017-0753
Ian Foster (@lanrat)	CVE-2017-0554
Jack Tang of Trend Micro Inc.	CVE-2017-0579, CVE-2017-9706
Jake Corina of Shellphish Grill Team	CVE-2017-0636, CVE-2017-0802
Jason Gu of Trend Micro	CVE-2017-0780
Jeff Sharkey of Google	CVE-2017-0421, CVE-2017-0423
Jeff Trim	CVE-2017-0422
Jeremy Huang (@bittorrent3389) of King Team	CVE-2017-13172
Jianjun Dai (@Jioun_dai) of Qihoo 360 Skyeye Labs	CVE-2017-0478, CVE-2017-0541, CVE-2017-0559
Jianqiang Zhao (@jianqiangzhao) of IceSword Lab, Qihoo 360	CVE-2016-5346, CVE-2016-8416, CVE-2016-8475, CVE-2016-8478, CVE-2017-0445, CVE-2017-0458, CVE-2017-0459, CVE-2017-0518, CVE-2017-0519, CVE-2017-0533, CVE-2017-0534, CVE-2017-0862, CVE-2017-6425, CVE-2017-8233, CVE-2017-8261, CVE-2017-8268, CVE-2017-9718, CVE-2017-1000380
Joey Brand of Census Consulting Inc.	CVE-2017-0698
Jon Sawyer (@jcase)	CVE-2016-8461, CVE-2016-8462
Jose Martinez	CVE-2017-0841
Juhu Nie of Xiaomi Inc.	CVE-2016-10276
Jun Cheng of Alibaba Inc.	CVE-2017-0404
Justin Paupore of Google	CVE-2017-0831
Kevin Deus of Google	CVE-2017-11052, CVE-2017-11054, CVE-2017-11055, CVE-2017-11062
Lenx Wei (韦韬) of Baidu X-Lab (百度安全实验室)	CVE-2016-8417, CVE-2016-10236, CVE-2017-0728, CVE-2017-0738, CVE-2017-0766, CVE-2017-0794 CVE-2017-9681, CVE-2017-9684, CVE-2017-9693, CVE-2017-9694, CVE-2017-9696, CVE-2017-9702, CVE-2017-9715, CVE-2017-9717, CVE-2017-9720, CVE-2017-10999, CVE-2017-11001, CVE-2017-11057, CVE-2017-11060, CVE-2017-11061, CVE-2017-11064, CVE-2017-11089, CVE-2017-11090
Liyadong of Qex Team, Qihoo 360	CVE-2017-0647
Lorenzo Nicolodi	CVE-2017-13165
Lubo Zhang of C0RE Team	CVE-2016-8479, CVE-2017-0564, CVE-2017-7368
ma.la of LINE Corporation	CVE-2016-5552
Makoto Onuki of Google	CVE-2017-0491
Marco Bartoli (@wsxarcher)	CVE-2017-0712
Mark Salyzyn of Google	CVE-2017-0558
Max Spector of Google	CVE-2017-0416
Michael Goberman of IBM Security X-Force	CVE-2016-8467
Michal Bednarski	CVE-2017-0598, CVE-2017-0806, CVE-2017-0871
Mike Anderson (@manderbot) of Tesla Motors Product Security Team	CVE-2017-0327, CVE-2017-0328
Mingjian Zhou (@Mingjian_Zhou) of C0RE Team	CVE-2017-0383, CVE-2017-0417, CVE-2017-0418, CVE-2017-0425, CVE-2017-0450, CVE-2017-0479, CVE-2017-0480, CVE-2017-0483, CVE-2017-0665, CVE-2017-0666, CVE-2017-0681, CVE-2017-0684, CVE-2017-0731, CVE-2017-0737, CVE-2017-0739, CVE-2017-0765, CVE-2017-0768, CVE-2017-0769, CVE-2017-0779, CVE-2017-0801, CVE-2017-0812, CVE-2017-0815, CVE-2017-0816, CVE-2017-0836, CVE-2017-0837, CVE-2017-0840, CVE-2017-0857, CVE-2017-8080, CVE-2017-6276, CVE-2017-13152, CVE-2017-13154, CVE-2017-13166, CVE-2017-13169, CVE-2017-14904
Monk Avel	CVE-2017-0396, CVE-2017-0399
Nan Li of Xiaomi Inc.	CVE-2016-10276
Nathan Crandall (@natecray)	CVE-2017-0535
Nathan Crandall (@natecray) of Tesla Motors Product Security Team	CVE-2017-0306, CVE-2017-0327, CVE-2017-0328, CVE-2017-0331, CVE-2017-0606, CVE-2017-8242, CVE-2017-9679
Nick Stephens of Shellphish Grill Team	CVE-2017-0636, CVE-2017-0802
Nikolay Elenkov of LINE Corporation	CVE-2016-5552
Niky1235 (@jiych_guru)	CVE-2017-0603, CVE-2017-0670, CVE-2017-0697, CVE-2017-0726, CVE-2017-0818
Ning You of Alibaba Mobile Security Group	CVE-2016-10280, CVE-2016-10281, CVE-2017-0463, CVE-2017-0565
Nitay Artenstein of Exodus Intelligence	CVE-2017-9417
Omer Shwartz of Ben Gurion University Cyber Lab	CVE-2017-0650
Peide Zhang of Vulpecker Team, Qihoo 360 Technology Co. Ltd.	CVE-2017-0618, CVE-2017-0625
Peng Xiao of Alibaba Mobile Security Group	CVE-2016-10280, CVE-2016-10281, CVE-2017-0463, CVE-2017-0506, CVE-2017-0565, CVE-2017-0842
Pengfei Ding (丁鹏飞) of Baidu X-Lab (百度安全实验室)	CVE-2016-8417, CVE-2016-10236, CVE-2017-0728, CVE-2017-0738, CVE-2017-0766, CVE-2017-0794, CVE-2017-9681, CVE-2017-9684, CVE-2017-9693, CVE-2017-9694, CVE-2017-9696, CVE-2017-9702, CVE-2017-9715, CVE-2017-9717, CVE-2017-9720, CVE-2017-11001, CVE-2017-10999, CVE-2017-11057, CVE-2017-11060, CVE-2017-11061, CVE-2017-11064, CVE-2017-11089, CVE-2017-11090
Peter Pi of Tencent Security Platform Department	CVE-2017-11046, CVE-2017-11091
Peter Pi (@heisecode) of Trend Micro	CVE-2016-8424, CVE-2016-8428, CVE-2016-8429, CVE-2016-8460, CVE-2016-8469, CVE-2016-8473, CVE-2016-8474
pjf of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2016-5346, CVE-2016-8416, CVE-2016-8464, CVE-2016-8475, CVE-2016-8478, CVE-2016-10285, CVE-2016-10288, CVE-2016-10290, CVE-2016-10294, CVE-2016-10295, CVE-2016-10296, CVE-2017-0329, CVE-2017-0332, CVE-2017-0432, CVE-2017-0434, CVE-2017-0445, CVE-2017-0446, CVE-2017-0447, CVE-2017-0458, CVE-2017-0459, CVE-2017-0500, CVE-2017-0501, CVE-2017-0502, CVE-2017-0503, CVE-2017-0509, CVE-2017-0518, CVE-2017-0519, CVE-2017-0524, CVE-2017-0529, CVE-2017-0533, CVE-2017-0534, CVE-2017-0536, CVE-2017-0566, CVE-2017-0573, CVE-2017-0581, CVE-2017-0616, CVE-2017-0617, CVE-2017-0624, CVE-2017-0649, CVE-2017-0744, CVE-2017-0862, CVE-2017-6425, CVE-2017-6426, CVE-2017-8233, CVE-2017-8243, CVE-2017-8244, CVE-2017-8261, CVE-2017-8266, CVE-2017-8268, CVE-2017-8270, CVE-2017-9691, CVE-2017-9718, CVE-2017-10997, CVE-2017-1000380
Qidan He (何淇丹) (@flanker_hqd) of KeenLab, Tencent (腾讯科恩实验室)	CVE-2017-0325, CVE-2017-0337, CVE-2017-0382, CVE-2017-0427, CVE-2017-0476, CVE-2017-0544, CVE-2017-0861, CVE-2017-0866, CVE-2017-13167, CVE-2017-13324, CVE-2017-15868
Qing Zhang of Qihoo 360	CVE-2017-0496
Qiwu Huang of Xiaomi Inc.	CVE-2016-10276
Quhe of Ant-financial Light-Year Security Lab (蚂蚁金服巴斯光年安全实验室)	CVE-2017-0522
Roee Hay (@roeehay) of Aleph Research, HCL Technologies	CVE-2016-10277, CVE-2017-0563, CVE-2017-0582, CVE-2017-0648, CVE-2017-0829, CVE-2017-13174
Roee Hay of IBM Security X-Force Research	CVE-2016-8467, CVE-2017-0510
Sagi Kedmi of IBM Security X-Force Research	CVE-2017-0433, CVE-2017-0510
Sahara of Secure Communications in DarkMatter	CVE-2017-0528
salls (@chris_salls) of Shellphish Grill Team, UC Santa Barbara	CVE-2017-0505, CVE-2017-13168
Scott Bauer (@ScottyBauer1)	CVE-2016-10274, CVE-2017-0339, CVE-2017-0405, CVE-2017-0504, CVE-2017-0516, CVE-2017-0521, CVE-2017-0562, CVE-2017-0576, CVE-2017-0705, CVE-2017-0740, CVE-2017-8259, CVE-2017-8260, CVE-2017-9680, CVE-2017-11053, CVE-2017-13160
Sean Beaupre (@firewaterdevs)	CVE-2016-8461, CVE-2016-8462, CVE-2017-0455
Seven Shen (@lingtongshen) of Trend Micro Mobile Threat Research Team	CVE-2016-8418, CVE-2016-8466, CVE-2016-10231, CVE-2017-0449, CVE-2017-0452, CVE-2017-0578, CVE-2017-0586, CVE-2017-0724, CVE-2017-0772, CVE-2017-0780, CVE-2017-6247, CVE-2017-6248, CVE-2017-6249, CVE-2017-7369
Shinichi Matsumoto of Fujitsu	CVE-2017-0498
Simon Chung of Georgia Tech	CVE-2017-0860
Stéphane Marques of ByteRev	CVE-2017-0489
Stephen Morrow	CVE-2017-0389
Svetoslav Ganov of Google	CVE-2017-0492
Tim Becker	CVE-2017-0546
Timothy Becker of CSS Inc.	CVE-2017-0667, CVE-2017-0732, CVE-2017-0805
Tong Lin of C0RE Team	CVE-2016-8425, CVE-2016-8426, CVE-2016-8449, CVE-2016-8479, CVE-2016-8481, CVE-2016-10291, CVE-2017-0333, CVE-2017-0428, CVE-2017-0435, CVE-2017-0436, CVE-2017-10661
Uma Sankar Pradhan (@umasankar_iitd)	CVE-2017-0560
Valerio Costamagna (@vaio_co)	CVE-2017-0712
Vasily Vasiliev	CVE-2017-0589, CVE-2017-0637, CVE-2017-0638, CVE-2017-0642, CVE-2017-0675, CVE-2017-0676, CVE-2017-0682, CVE-2017-0683, CVE-2017-0696, CVE-2017-0699, CVE-2017-0701, CVE-2017-0702, CVE-2017-0716, CVE-2017-0757
V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro	CVE-2017-0381, CVE-2017-0424, CVE-2017-0466, CVE-2017-0467, CVE-2017-0468, CVE-2017-0469, CVE-2017-0470, CVE-2017-0471, CVE-2017-0472, CVE-2017-0473, CVE-2017-0482, CVE-2017-0484, CVE-2017-0485, CVE-2017-0486, CVE-2017-0487, CVE-2017-0494, CVE-2017-0495, CVE-2017-0538, CVE-2017-0539, CVE-2017-0540, CVE-2017-0555, CVE-2017-0556, CVE-2017-0557, CVE-2017-0587, CVE-2017-0590, CVE-2017-0600, CVE-2017-0640, CVE-2017-0674, CVE-2017-0677, CVE-2017-0679, CVE-2017-0680, CVE-2017-0685, CVE-2017-0686, CVE-2017-0689, CVE-2017-0693, CVE-2017-0695, CVE-2017-0713, CVE-2017-0715, CVE-2017-0750, CVE-2017-10662, CVE-2017-10663
wanchouchou of Ant-financial Light-Year Security Lab (蚂蚁金服巴斯光年安全实验室)	CVE-2017-0522
Weichao Sun (@sunblate) of Alibaba Inc.	CVE-2017-0391, CVE-2017-0407, CVE-2017-0549, CVE-2017-0759
Wenjun Hu of Palo Alto Networks	CVE-2017-0752
Wenke Lee of Georgia Tech	CVE-2017-0860
Wenke Dou of C0RE Team	CVE-2017-0384, CVE-2017-0385, CVE-2017-0398, CVE-2017-0400, CVE-2017-0401, CVE-2017-0402, CVE-2017-0417, CVE-2017-0418, CVE-2017-0450, CVE-2017-0483, CVE-2017-0768, CVE-2017-0779, CVE-2017-0812, CVE-2017-0815, CVE-2017-0816
Wenlin Yang (@wenlin_yang) of Alpha Team, Qihoo 360 Technology Co. Ltd.	CVE-2017-0577, CVE-2017-0580
Wish Wu (@wish_wu) (吴潍浠此彼) of Ant-financial Light-Year Security Lab	CVE-2017-0408, CVE-2017-0477, CVE-2017-11063, CVE-2017-11092
Wolfu (付敬贵) of Tencent Security Platform Department	CVE-2017-0863, CVE-2017-11050, CVE-2017-11051, CVE-2017-11067, CVE-2017-11073, CVE-2017-11093
Xiangqian Zhang of Alibaba Mobile Security Group	CVE-2017-0796, CVE-2017-0827
Xiao Zhang of Palo Alto Networks	CVE-2017-0752
Xiaodong Wang of C0RE Team	CVE-2017-0429, CVE-2017-0448
Xiling Gong of Tencent Security Platform Department	CVE-2017-0597, CVE-2017-0708, CVE-2017-8236, CVE-2017-9690
Xingyuan Lin of 360 Marvel Team	CVE-2017-0627, CVE-2017-13163
Xuxian Jiang of C0RE Team	CVE-2016-8425, CVE-2016-8426, CVE-2016-8430, CVE-2016-8431, CVE-2016-8432, CVE-2016-8449, CVE-2016-8435, CVE-2016-8479, CVE-2016-8480, CVE-2016-8481, CVE-2016-8482, CVE-2016-10291, CVE-2017-0326, CVE-2017-0333, CVE-2017-0383, CVE-2017-0384, CVE-2017-0385, CVE-2017-0398, CVE-2017-0400, CVE-2017-0401, CVE-2017-0402, CVE-2017-0417, CVE-2017-0418, CVE-2017-0425, CVE-2017-0428, CVE-2017-0429, CVE-2017-0435, CVE-2017-0436, CVE-2017-0444, CVE-2017-0448, CVE-2017-0450, CVE-2017-0479, CVE-2017-0480, CVE-2017-0483, CVE-2017-0526, CVE-2017-0527, CVE-2017-0651, CVE-2017-0665, CVE-2017-0666, CVE-2017-0681, CVE-2017-0684, CVE-2017-0709, CVE-2017-0731, CVE-2017-0737, CVE-2017-0739, CVE-2017-0765, CVE-2017-0768, CVE-2017-0769, CVE-2017-0779, CVE-2017-0801, CVE-2017-7368, CVE-2017-8264, CVE-2017-10661
XTN	CVE-2017-13165
Yan Zhou of Eagleye team, SCC, Huawei	CVE-2017-9678
Yanfeng Wang of C0RE Team	CVE-2016-8430, CVE-2016-8482
Yang Cheng of Xiaomi Inc.	CVE-2016-10276
Yang Dai of Vulpecker Team, Qihoo 360 Technology Co. Ltd	CVE-2017-0795, CVE-2017-0799, CVE-2017-0804, CVE-2017-0803, CVE-2017-6262, CVE-2017-6263, CVE-2017-6280
Yang Song of Alibaba Mobile Security Group	CVE-2016-10280, CVE-2016-10281, CVE-2017-0463, CVE-2017-0506, CVE-2017-0565, CVE-2017-0711, CVE-2017-0741, CVE-2017-0742, CVE-2017-0751, CVE-2017-0796, CVE-2017-0798, CVE-2017-0800, CVE-2017-0827, CVE-2017-0842, CVE-2017-0843, CVE-2017-0864, CVE-2017-11000, CVE-2017-11059, CVE-2017-9703, CVE-2017-9708, CVE-2017-13170
Yanick Fratantonio (UC Santa Barbara, Shellphish Grill Team, EURECOM)	CVE-2017-0860
Yangkang (@dnpushme) of Qex Team, Qihoo 360	CVE-2017-0647, CVE-2017-0690, CVE-2017-0753
Yao Jun of C0RE Team	CVE-2016-8431, CVE-2016-8432, CVE-2016-8435, CVE-2016-8480
Yaoguang Chen of Ant-financial Light-Year Security Lab (蚂蚁金服巴斯光年安全实验室)	CVE-2017-13171
Yong Wang (王勇) (@ThomasKing2014) of Alibaba Inc.	CVE-2017-0404, CVE-2017-0588, CVE-2017-0842, CVE-2017-13164, CVE-2017-9708, CVE-2017-13170
Yonggang Guo (@guoygang) of IceSword Lab, Qihoo 360 Technology Co. Ltd.	CVE-2016-10289, CVE-2017-0465, CVE-2017-0564, CVE-2017-0746, CVE-2017-0749, CVE-2017-7370, CVE-2017-8267, CVE-2017-8269, CVE-2017-8271, CVE-2017-8272, CVE-2017-11048, CVE-2017-12146
Yongke Wang of Tencent's Xuanwu Lab	CVE-2017-0729, CVE-2017-0767, CVE-2017-0839, CVE-2017-0848
Dr. Yossi Oren of Ben Gurion University Cyber Lab	CVE-2017-0650
Yu Pan of Vulpecker Team, Qihoo 360 Technology Co. Ltd	CVE-2016-10282, CVE-2017-0517, CVE-2017-0532, CVE-2017-0615, CVE-2017-0618, CVE-2017-0625, CVE-2017-0795, CVE-2017-0799, CVE-2017-0804, CVE-2017-0803, CVE-2017-6262, CVE-2017-6263, CVE-2017-6280
Yuan-Tsung Lo of C0RE Team	CVE-2016-8425, CVE-2016-8426, CVE-2016-8430, CVE-2016-8431, CVE-2016-8432, CVE-2016-8435, CVE-2016-8449, CVE-2016-8479, CVE-2016-8480, CVE-2016-8481, CVE-2016-8482, CVE-2016-10291, CVE-2017-0326, CVE-2017-0333, CVE-2017-0428, CVE-2017-0429, CVE-2017-0435, CVE-2017-0436, CVE-2017-0444, CVE-2017-0448, CVE-2017-0526, CVE-2017-0527, CVE-2017-6264, CVE-2017-6274, CVE-2017-6275, CVE-2017-0651, CVE-2017-0709, CVE-2017-0824, CVE-2017-7368, CVE-2017-8264, CVE-2017-10661, CVE-2017-14903
Yuebin Sun of Tencent's Xuanwu Lab	CVE-2017-0767, CVE-2017-0839, CVE-2017-0848
Yuqi Lu (@nikos233) of C0RE Team	CVE-2017-0383, CVE-2017-0401, CVE-2017-0417, CVE-2017-0425, CVE-2017-0483
Yuxiang Li (@Xbalien29) of Tencent Security Platform Department	CVE-2017-0395, CVE-2017-0669, CVE-2017-0704
Zach Riggle (@ebeip90) of the Android Security Team	CVE-2017-0710
Zhanpeng Zhao (行之) (@0xr0ot) of Security Research Lab, Cheetah Mobile	CVE-2016-8451
Zhe Jin (金哲) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.	CVE-2017-0758, CVE-2017-0760
Zhen Zhou (@henices) of NSFocus	CVE-2017-0406
Zhi Xu of Palo Alto Networks	CVE-2017-0752
Zhixin Li of NSFocus	CVE-2017-0406
Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd.	CVE-2017-0475, CVE-2017-0497, CVE-2017-0548, CVE-2017-0678, CVE-2017-0691, CVE-2017-0700, CVE-2017-0714, CVE-2017-0718, CVE-2017-0719, CVE-2017-0720, CVE-2017-0722, CVE-2017-0725, CVE-2017-0745, CVE-2017-0760, CVE-2017-0761, CVE-2017-0764, CVE-2017-0776, CVE-2017-0777, CVE-2017-0778, CVE-2017-0813, CVE-2017-0814, CVE-2017-0820, CVE-2017-0823, CVE-2017-0850, CVE-2017-0858, CVE-2017-0879
Zubin Mithra of Google	CVE-2017-0462, CVE-2017-8241

Additional contributions

We would also like to acknowledge the contributions of the following individuals to Android security:

William Roberts (william.c.roberts@intel.com)

2016

Abhishek Arya of Google Chrome Security Team

Adam Donenfeld et al. of Check Point Software Technologies Ltd.

Adam Powell of Google

Alex Chapman of Context Information Security

Altaf Shaik of Security in Telecommunications

Andre Teixeira Rizzo

Andrea Biondo

Andrei Kapishnikov of Google

Andy Tyler (@ticarpi) of e2e-assure

Anestis Bechtsoudis (@anestisb) of CENSUS S.A.

Ao Wang (@ArayzSegment) of PKAV, Silence Information Technology

Askyshang of Security Platform Department, Tencent

Baozeng Ding of Alibaba Mobile Security Group

Ben Hawkes of Google Project Zero

Billy Lau of Android Security

Brad Ebinger of Google Telecom Team

Broadgate Team

Chad Brubaker of Android Security

Chao Yang of Alibaba Mobile Security Group

Chenfu Bao (包沉浮) of Baidu X-Lab

Chengming Yang of Alibaba Mobile Security Group

Chi Zhang of C0RE Team

Chiachih Wu (@chiachih_wu) of C0RE Team from Qihoo 360

Christian Seel

Christopher Tate of Google

Constantinos Patsakis of University of Piraeus

Cory Pruce of Carnegie Mellon University

Cristiano Giuffrida of Vrije Universiteit Amsterdam

Daniel Micay of Copperhead Security

David Benjamin of Google

David Riley of the Google Pixel C Team

Dawei Peng (Vinc3nt4H) of Alibaba Mobile Security Team

Di Shen (@returnsme) of KeenLab (@keen_lab), Tencent

Dianne Hackborn of Google

Dmitry Vyukov of Google Dynamic Tools team

Dominik Schürmann of Institute for Operating Systems and Computer Networks, TU Braunschweig

Dongdong She of UC Riverside

Dongkwan Kim (dkay@kaist.ac.kr) of System Security Lab, KAIST

dosomder

dragonltx of Alibaba mobile security team

Dzmitry Lukyanenka (www.linkedin.com/in/dzima)

Ecular Xu (徐健) of Trend Micro

Efthimios Alepis of University of Piraeus

En He (@heeeeen4x) of MS509Team

Gal Beniamini (@laginimaineb, http://bits-please.blogspot.com)

Gengjia Chen (@chengjia4574) of Lab 0x031E, Qihoo 360 Technology Co. Ltd

Gengming Liu (刘耕铭) (@dmxcsnsbh) of KeenLab, Tencent

George Piskas of École polytechnique fédérale de Lausanne

Giovanni Vigna of University of California, Santa Barbara

Greg Kaiser of Google Android Team

Guang Gong (龚广) (@oldfresher) of Qihoo 360 Technology Co. Ltd.

Hang Zhang of UC Riverside

Hanxiang Wen of C0RE Team

Hao Chen of Vulpecker Team, Qihoo 360 Technology Co. Ltd.

Hao Qin of Security Research Lab, Cheetah Mobile

Herbert Bos of Vrije Universiteit Amsterdam

Hongil Kim (hongilk@kaist.ac.kr) of System Security Lab, KAIST

Imre Rad of Search-Lab Ltd.

Iwo Banas

Jake Valletta of Mandiant, a FireEye company

James Forshaw of Google Project Zero

Jann Horn (https://thejh.net)

Jason Rogena

Jeremy C. Joslin of Google

jfang of KEEN lab, Tencent (@K33nTeam)

Jianqiang Zhao (@jianqiangzhao) of IceSword Lab, Qihoo 360

Joshua Drake (@jduck)

Jouni Malinen PGP id EFC895FA

Kai Lu (@K3vinLuSec) of Fortinet's FortiGuard Labs

Kandala Shivaram reddy

Kaveh Razavi of Vrije Universiteit Amsterdam

Kenny Root of Google

Lee Campbell of Google

Lubo Zhang of C0RE Team

Maciej Szawłowski of the Google Security Team

Madhu Priya Murugan of CISPA, Saarland University

Makoto Onuki of Google

Marco Grassi (@marcograss) of KeenLab (@keen_lab), Tencent

Marco Nelissen of Google

Mark Brand of Google Project Zero

Mark Renouf of Google

Martin Barbella of Google Chrome Security Team

Martina Lindorfer of University of California, Santa Barbara

Max Spector of Google

MengLuo Gou (@idhyt3r) of Bottle Tech

Michał Bednarski ( github.com/michalbednarski)

Mike Maarse

Min Chong of Android Security

Mingjian Zhou (@Mingjian_Zhou) of C0RE Team, Qihoo 360

Miriam Gershenson of Google

Nancy Wang of Vertu Corporation LTD

Nasim Zamir

Nathan Crandall (@natecray) of Tesla Motors Product Security Team

Nico Golde (@iamnion) of Qualcomm Product Security Initiative

Nightwatch Cybersecurity Research (@nightwatchcyber)

Ning You of Alibaba Mobile Security Group

Oleksiy Vyalov of Google

Oliver Chang of Google Chrome Security Team

Paul Stone of Context Information Security

Peng Xiao of Alibaba Mobile Security Group

Pengfei Ding (丁鹏飞) of Baidu X-Lab

Peter Pi (@heisecode) of Trend Micro

pjf of IceSword Lab, Qihoo 360

Quan Nguyen of Google Information Security Engineer Team

Qianwei Hu (rayxcp@gmail.com) of WooYun TangLab

Qidan He (@Flanker_hqd) of KeenLab (@keen_lab), Tencent

Richard Shupak

Ricky Wai of Google

Robin Lee of Google

Roee Hay, IBM Security X-Force Researcher

Roeland Krak

Romain Trouvé of MWR Labs

Ronald L. Loor Vargas (@loor_rlv) of TEAM Lv51

Sagi Kedmi, IBM Security X-Force Researcher

Samuel Tan of Google

Santos Cordon of Google Telecom Team

Scott Bauer (@ScottyBauer1)

Sen Nie (@nforest_) of KEEN lab, Tencent (@K33nTeam)

Sergey Bobrov (@Black2Fan) of Kaspersky Lab

Seven Shen (@lingtongshen) of Trend Micro (www.trendmicro.com)

Sharvil Nanavati of Google

Shinjo Park (@ad_ili_rai) of Security in Telecommunications

Stuart Henderson

Su Mon Kywe of Singapore Management University

Tao (Lenx) Wei (韦韬) of Baidu X-Lab

Thom Does

Tieyan Li of Huawei

Tim Strazzere (@timstrazz) of SentinelOne / RedNaga

Tom Craig of Google X

Tom Rootjunky

Tong Lin of C0RE Team

Tongxin Li of Peking University

trotmaster (@trotmaster99)

Vasily Vasilev

Victor Chang of Google

Victor van der Veen of Vrije Universiteit Amsterdam

Vignesh Venkatasubramanian of Google

Vishwath Mohan of Android Security

Wei Wei (@Danny__Wei) of Xuanwu LAB, Tencent

Weichao Sun (@sunblate) of Alibaba Inc

Wen Niu (@NWMonster) of KeenLab (@keen_lab), Tencent

Wenke Dou of C0RE Team

Wenlin Yang of Alpha Team, Qihoo 360 Technology Co. Ltd.

William Roberts ( william.c.roberts@intel.com)

Wish Wu (@wish_wu) (吴潍浠) of Mobile Threat Response Team, Trend Micro Inc.

Xiaodong Wang of C0RE Team

Xiaofeng Wang of Indiana University Bloomington

Xiling Gong of Tencent Security Platform Department

Xingyu He (何星宇) (@Spid3r_) of Alibaba Inc

Xinhui Han of Peking University

Xuxian Jiang of C0RE Team, Qihoo 360

Yabin Cui from Android Bionic Team

Yacong Gu of TCA Lab, Institute of Software, Chinese Academy of Sciences

Yakov Shafranovich of Nightwatch Cybersecurity

Yang Dong of Alibaba Mobile Security Group

Yang Song of Alibaba Mobile Security Group

Yanick Fratantonio of University of California, Santa Barbara

Yao Jun of C0RE Team

Yeonjoon Lee of Indiana University Bloomington

Yi Zhang of Alibaba Mobile Security Group

Yingjiu Li of Singapore Management University

Yong Shi of Eagleye team, SCC, Huawei

Yong Wang (王勇) (@ThomasKing2014) of Alibaba Inc.

Yongke Wang (@Rudykewang) of Xuanwu LAB, Tencent

Yongzheng Wu of Huawei

Yuan-Tsung Lo (computernik@gmail.com) of C0RE Team

Yulong Zhang of Baidu X-Lab

Yuru Shao of University of Michigan Ann Arbor

Yuxiang Li (@Xbalien29) of Tencent Security Platform Department

Zach Riggle (@ebeip90) of the Android Security Team

Zhanpeng Zhao (行之) (@0xr0ot) of Security Research Lab, Cheetah Mobile

Zhe Jin (金哲) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.

Zhiyun Qian of UC Riverside

Zinuo Han of PKAV, Silence Information Technology

Zubin Mithra of Google

2015

Abhishek Arya, Google Chrome Security Team

Alex Copot

Alex Eubanks

Alexandru Blanda

Arne Swinnen (www.arneswinnen.net)

Artem Chaykin

Ben Hawkes

Brennan Lautner

Chiachih Wu of C0RE Team from Qihoo 360

Darmstadt (siegfried.rasthofer@gmail.com)

Daniel Micay (daniel.micay@copperhead.co) at Copperhead Security

Dongkwan Kim of System Security Lab, KAIST (dkay@kaist.ac.kr)

dragonltx of Alibaba Mobile Security Team

Gal Beniamini ( http://bits-please.blogspot.com)

Guang Gong (龚广) (@oldfresher, higongguang@gmail.com) of Qihoo 360 Technology Co.Ltd

Hongil Kim of System Security Lab, KAIST (hongilk@kaist.ac.kr)

Ian Beer of Google Project Zero

Iván Arce (@4Dgifts) of Programa STIC at Fundación Dr. Manuel Sadosky, Buenos Aires Argentina

Jack Tang of Trend Micro (@jacktang310)

jgor of The University of Texas at Austin (@indiecom)

Joaquín Rinaudo (@xeroxnir) of Programa STIC at Fundación Dr. Manuel Sadosky, Buenos Aires Argentina

Jordan Gruskovnjak of Exodus Intelligence (@jgrusko)

Joshua Drake of Zimperium

Lei Wu of C0RE Team from Qihoo 360

Marco Grassi (@marcograss) of KeenTeam (@K33nTeam)

Mark Carter (@hanpingchinese) of EmberMitre Ltd

Martin Barbella, Google Chrome Security Team

Michael Peck of The MITRE Corporation (mpeck@mitre.org)

Michał Bednarski ( https://github.com/michalbednarski)

Michael Roland of JR-Center u'smile at University of Applied Scienses, Upper Austria/Hagenberg

Natalie Silvanovich of Google Project Zero

Oliver Chang, Google Chrome Security Team

Peter Pi of Trend Micro

Ping Li of Qihoo 360 Technology Co. Ltd

Qidan He (@flanker_hqd) from KeenTeam (@K33nTeam, http://k33nteam.org/)

Roee Hay and Or Peles

Seven Shen of Trend Micro

Siegfried Rasthofer of Secure Software Engineering Group, EC SPRIDE Technische Universität

Stephan Huber of Testlab Mobile Security, F raunhofer SIT (Stephan.Huber@sit.fraunhofer.de)

Steven Vittitoe of Google Project Zero

Tony Beltramelli (@Tbeltramelli) of tonybeltramelli.com

Tzu-Yin (Nina) Tai

Wangtao(neobyte) of Baidu X-Team

Wen Xu (@antlr7) from KeenTeam (@K33nTeam, http://k33nteam.org/)

William Roberts ( william.c.roberts@intel.com)

Wish Wu of Trend Micro Inc. (@wish_wu)

Xuxian Jiang of C0RE Team from Qihoo 360

Yajin Zhou of C0RE Team from Qihoo 360

2014

Aaron Mangel of Banno (amangel@gmail.com)

Alex Park (@saintlinu)

Alexandru Gheorghita

Andrey Labunets of Facebook

Ange Albertini (@angealbertini)

Axelle Apvrille of Fortinet, FortiGuards Labs

Dan Amodio of Aspect Security (@DanAmodio)

David Murdoch

Henry Hoggard of MWR Labs (@HenryHoggard)

Imre Rad of Search-Lab Ltd.

Jann Horn

Jeff Forristal of Bluebox Security

Joseph Redfern of MWR Labs
(@JosephRedfern)

Kunal Patel of Samsung KNOX Security Team (kunal.patel1@samsung.com)

Luander Michel Ribeiro (@luanderock)

Luyi Xing of Indiana University Bloomington (xingluyi@gmail.com)

Marc Blanchou (@marcblanchou)

Mathew Solnik (@msolnik)

Michał Bednarski

Raimondas Sasnauskas of University of Utah

Robert Craig of Trusted Systems Research Group, US National Security Agency

Samsung Mobile

Scotty Bauer of University of Utah (sbauer@eng.utah.edu)

Sebastian Brenza

Siegfried Rasthofer of Secure Software Engineering Group, EC SPRIDE Technische Universität Darmstadt (siegfried.rasthofer@gmail.com)

Sony Mobile

Stephan Huber of Testlab Mobile Security, Fraunhofer SIT (Stephan.Huber@sit.fraunhofer.de)

Stephen Smalley of Trusted Systems Research Group, US National Security Agency

Steven Arzt of Secure Software Engineering Group, EC SPRIDE Technische Universität Darmstadt (Steven.Arzt@ec-spride.de)

Subodh Iyengar of Facebook

Tongxin Li of Peking University (litongxin1991@gmail.com)

Tony Trummer of The Men in the Middle
(@SecBro1)

Tushar Dalvi (@tushardalvi)

Valera Neronov

Wang Tao of Baidu X-Team (wintao@gmail.com)

Wang Yu of Baidu X-Team (@xi4oyu)

Will Shackleton of Facebook

William Roberts (bill.c.roberts@gmail.com)

Xiaofeng Wang of Indiana University Bloomington (xw7@indiana.edu)

Xiaoyong Zhou of Indiana University Bloomington
(@xzhou, zhou.xiaoyong@gmail.com)

Xinhui Han of Peking University (hanxinhui@pku.edu.cn)

Yeonjoon Lee of Indiana University Bloomington (luc2yj@gmail.com)

Yu-Cheng Lin 林禹成 (@AndroBugs)

Zhang Dong Hui of Baidu X-Team (shineastdh)

2013

Ivaylo Marinkov of eCommera (ivo@tsarstva.bg)

Jon Sawyer of Applied Cybersecurity LLC (jon@cunninglogic.com)

Joshua J. Drake of Accuvant LABS (@jduck)

Kan Yuan

Lucas Yang (amadoh4ck) of RaonSecurity (amadoh4ck@gmail.com)

Luyi Xing of Indiana University Bloomington (xingluyi@gmail.com)

Mike Ryan of iSEC Partners
(@mpeg4codec, mikeryan@isecpartners.com )

Muhammad Naveed of University of Illinois at Urbana-Champaign
(naveed2@illinois.edu)

Qualcomm Product Security Initiative

Roee Hay (@roeehay, roeehay@gmail.com)

Robert Craig of Trusted Systems Research Group, US National Security Agency

Ruben Santamarta of IOActive (@reversemode)

Stephen Smalley of Trusted Systems Research Group, US National Security Agency

William Roberts (bill.c.roberts@gmail.com)

Xiaorui Pan of Indiana University Bloomington (eagle200467@gmail.com)

XiaoFeng Wang of Indiana University Bloomington (xw7@indiana.edu)

2012

David Weinstein (@insitusec) of viaForensics

Jann Horn

Ravishankar Borgaonkari (@raviborgaonkar) of TU Berlin

Robert Craig of Trusted Systems Research Group, US National Security Agency

Roee Hay (@roeehay, roeehay@gmail.com)

Stephen Smalley of Trusted Systems Research Group, US National Security Agency

William Roberts (bill.c.roberts@gmail.com)

2011

Collin Mulliner of MUlliNER.ORG (@collinrm)

2009

Charlie Miller (@0xcharlie)

Collin Mulliner of MUlliNER.ORG (@collinrm)