According to ZDNet blog Google’s Android SDK is facing multiple vulnerabilities that are remotely exploitable. The article is pointing to new Core Security Technologies report.

In an advisory, Core Security noted heap and interflow overflow issues with Android.

Link:
http://blogs.zdnet.com/security/?p=921

The report from Core Security is located at
http://www.coresecurity.com/?action=item&id=2148