I found and investigated a fairly serious issue with ARP on my Samsung Galaxy S23 Ultra (Android 14).
The ARP implementation ignores subnet masks and assumes /24 for all networks. Well to be clear, it's more absurd than that. ARP assumes the third number in a IPv4 address to be zero, as far as I can tell. It boggles the mind. This won't be noticed for the majority of users, but some of us prefer the luxury of the larger subnets, and it causes chaos.
I filed a bug with Google who has tagged it as Sev/Pri 2 which is rather severe.