How frequently do vulnerabilites affect TLS on Android?

It's a bit of a hand-wavy question, but my Samsung S21 will get its last security update in January, and I was trying to figure out how many vulnerabilities/CVEs (say, in the past few years) would have affected the threat model I care about (mostly just TLS to my financial institutions).

Moreover, if I access the web through mobile Firefox (which is updated via the Play Store for longer than my phone gets system-wide security updates), how bad are the vulnerabilities really?

I found a study that brushes on some of these topics ("Common Security Vulnerabilities in Android Apps: A Comprehensive Guide" published in IJFMR), but I would be curious to see something like:

- a concrete vulnerability, even if it only affected a small number of Android devices - a combination of flaws that would have ostensibly allowed an attacker to get my credentials/access to my financial accounts - something affecting Firefox specifically

(Disclaimer) I'm upgrading to an in-date smartphone, but I just thought it would be a fun exercise since we always hear about the importance of updates minus the specifics . . . .