Many models that launched with Android 8.0 are still affected by a 0-day vulnerability that was not properly patched in 2017. The list of models includes: Google's Pixel 1 and 2, Samsung's Galaxy S7/8/9, Huawei P20, Xiaomi Redmi 5A / Note 5, Xiaomi A1, Oppo A3, Moto Z3, and all LG's smartphones launched in 2H 2017.
https://www.notebookcheck.net/Older-zero-day-Android-exploit-still-affects-Google-Pixel-Samsung-Galaxy-and-other-handhelds.436910.0.html