Libraries

AndroidX Security State can tell you if a CVE is patched on a device

Patch-level tracking across system, modules and kernel, with OSV data behind it.