...
- http://www.cvedetails.com/vulnerability-list/vendor_id-1224/product_id-19997/Google-Android.html big list of Google Android CVE security vulns
- http://www.pcworld.com/article/2366040/android-444-fixes-openssl-connection-hijacking-flaw.html Android 4.4.4 fixes OpenSSL hijacking vuln
- http://www.networkworld.com/article/2226770/smartphones/risk-and-the-android-heartbleed-vulnerability.html Android and Heartbleed
- http://www.jpcert.or.jp/english/ JPCERT's English-language Android vulnerabilities site
- http://threatpost.com/android-root-access-vulnerability-affecting-most-devices
- http://www.pcworld.com/article/2111100/rogue-apps-could-exploit-android-vulnerability-to-brick-devices-researchers-warn.html memory corruption via string over 387,000 characters.
- https://groups.google.com/forum/?fromgroups#!forum/android-security-discuss Android security group, discussions of a lot of secure Android app coding issues
- Three of the CERT secure coding books:
- Java rules
- Java guidelines
- C rules and recommendations
...