88 'high-risk' security defects found in Android kernel
zdnet.com
zdnet.com
And, of course, this is assuming either Coverity manually checked and confirmed each of these problems (possible, but not mentioned in the article) or that Coverity's scanner has a 0% false positive rate (highly unlikely to the point of patently absurd; my experience with static analyzers is false positives being 50 to 80% of the total though it's been a couple of years since I used Coverity specifically).