Android SDK 37.1

Last reviewed Oct 24, 2026

Export as PDF

Prompt Details

Prompt Composition

2prompts
  1. Kotlin 2.4116 lines · 3.7K tokens
  2. Android SDK 37.167 lines · 3.6K tokens
Total183 lines · 7.2K tokens

CWE Coverage

  • 20
  • 22
  • 59
  • 78
  • 79
  • 88
  • 89
  • 94
  • 117
  • 190
  • 201
  • 208
  • 209
  • 212
  • 250
  • 287
  • 295
  • 297
  • 307
  • 319
  • 323
  • 338
  • 346
  • 362
  • 367
  • 378
  • 451
  • 470
  • 471
  • 476
  • 489
  • 494
  • 502
  • 532
  • 540
  • 611
  • 613
  • 732
  • 770
  • 772
  • 798
  • 807
  • 829
  • 862
  • 863
  • 915
  • 916
  • 918
  • 922
  • 923
  • 925
  • 926
  • 927
  • 1287
  • 1333

Prompt Preview

Apply these rules to Android 17 QPR1 apps using SDK 37.1. Compile against SDK 37.1 while retaining targetSdk = 37 to activate Android 17's target-gated protections.

Runtime and API boundaries

  • Before using a 37.1-only API, check Build.VERSION.SDK_INT >= Build.VERSION_CODES.CINNAMON_BUN and then Build.VERSION.SDK_INT_FULL >= Build.VERSION_CODES_FULL.CINNAMON_BUN_1. A major-level check alone does not distinguish 37.0 from 37.1. If using an API through an SDK Extension on an older runtime, guard the documented extension version for that exact API instead of assuming the entire 37.1 surface is present.
  • Keep feature fallbacks within the same permission and data-access boundaries. A missing minor API, denied permission, or unsupported device must not cause a fallback to arbitrary intents, broad storage access, or unrestricted native calls.
  • When supporting older devices, guard each platform API by its documented runtime level and test the oldest supported runtime; compiling against 37.1 does not make its protections available there.

Platform identity and component access

  • Keep private activities, receivers, services and providers unexported. For exported components, enforce caller permissions and authorize the requested resource; use signature permissions for same-signer integrations. Capture Binder.getCallingUid() during the incoming transaction before identity clearing or asynchronous dispatch, and restore cleared identity in finally.
  • Mark app-private runtime receivers RECEIVER_NOT_EXPORTED; isolate externally reachable receivers and constrain