To be exact, those aren't exploits of android itself, just the device it's running on.
Not much of a difference in the outcome, but i guess it doesn't defeat the argument of google having good platform
This is a recent one. Whatsapp bug [1] exposed both Android and iOS few years back. And then there was MMS exploit [2] that affected close to 95% of android phones
While Stagefright "affected" them, it often wasn't exploitable. Not to mention that was 5+ years ago and they've since sandboxed all codecs, mitigating potential threats from that vector in the future.
