Skip to content
September 24, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Android
  • Google blocks Android phone makers put more than two cutouts on a device
  • Android

Google blocks Android phone makers put more than two cutouts on a device

Do Son August 1, 2018 2 minutes read
Android two cutouts
Add Daily CyberSecurity as a preferred source on Google

With the release of the iPhone X last year, a large number of Android phone manufacturers began to launch all-in-one full-screen phones, including Vivo, Oppo, OnePlus and Nokia. Google’s next-generation Pixel device is also rumoured to be carrying a full-screen phone. Google officially announced support for the cutouts screen area in the Android P system developer preview, but Google warned Android phone makers that more than two screen partitions (cutouts) are not allowed.

Android developers website on Google details how to modify the application code to support up to two screens fringe of Android devices, as well as adapting to developers 18: 9 ratio screen. In Android P, developers can use the screen segmentation area reasonably and effectively. For device manufacturers, Google gives guidelines for designation of screen segmentation areas:

“First, devices must ensure that their cutouts do not negatively affect apps. There are two key requirements:

  • In portrait orientation, with no special flags set, the status bar must extend to at least the height of the cutout.
  • In fullscreen or landscape orientation, the entire cutout area must be letterboxed.

Second, devices may only have up to one cutout on each short edge of the device. This means that:

  • You won’t see multiple cutouts on a single edge, or more than two cutouts on a device.
  • You won’t see a cutout on the left or right long edge of the device.”

That is to say, Google allows a device to set up at most one cutouts at the top or bottom edge of the screen, and one device must not exceed two cutouts, although the mobile device with cutouts at the bottom has not been seen yet.

Source, Image: android-developers

Related coverage

  • Google says “Android security has matured”, hackers are difficult and expensive to high severity exploits
  • Hardened Signals: Google’s Pixel 10 Uses Rust to Kill Modem Exploits
  • Google Assembles Foxconn/Samsung Supply Chain for Q4 2026 AI Glasses Launch
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: android two cutouts

Search

Translation

CVE ALERTS
📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo
Subscribe Now

🚨 Active Exploits in the Wild

  • CVE-2026-48842CVSS 8.1
    Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
    Admin intel📅 Updated: Sep 23, 2026
  • CVE-2026-87902
    Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
    Admin intel📅 Updated: Sep 23, 2026
  • CVE-2026-94127CVSS 9.8
    When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
  • CVE-2026-85102CVSS 9.8
    Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
  • CVE-2026-93616CVSS 9.8
    A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
  • CVE-2026-93952CVSS 10.0
    VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
  • CVE-2026-32996CVSS 7.3
    A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.
    Admin intel📅 Updated: Sep 22, 2026
  • CVE-2026-7273CVSS 8.8
    A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a...
    CISA KEV📅 Added to KEV: Sep 21, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-61741CVSS 9.3
    http4s-scala-xml provides `EntityDecoder[F, scala.xml.Elem]` instances that parse XML message bodies. Prior to versions 0.24.1 and 1.0.0-M39, these decoders...
    📅 Updated: Sep 24, 2026
  • CVE-2026-61732CVSS 10.0
    Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results —...
    📅 Updated: Sep 24, 2026
  • CVE-2026-69843CVSS 10.0
    No description available
    📅 Updated: Sep 24, 2026
  • CVE-2026-62874CVSS 10.0
    No description available
    📅 Updated: Sep 24, 2026
  • CVE-2026-79766CVSS 9.1
    Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until...
    📅 Updated: Sep 24, 2026
  • CVE-2026-66792CVSS 9.9
    A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to...
    📅 Updated: Sep 24, 2026
  • CVE-2026-69399CVSS 10.0
    No description available
    📅 Updated: Sep 24, 2026
  • CVE-2026-58822CVSS 9.8
    In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could...
    📅 Updated: Sep 24, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.