ASB-A-385917501

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-385917501.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-385917501
Aliases
  • A-385917501
  • CVE-2026-0099
Published
2026-06-01T00:00:00Z
Modified
2026-06-15T14:59:01.925224191Z
Summary
[none]
Details

In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

References

Affected packages

Android
platform/packages/modules/Nfc

Package

Name
platform/packages/modules/Nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-06-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-06-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-385917501-71997677",
            "target": {
                "file": "NfcNci/src/com/android/nfc/cardemulation/HostEmulationManager.java"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "224768083718427315416357503336807362862",
                    "37724214264644538098798405521993550560",
                    "324092725361412061698026165962187219276",
                    "289818009631056797221120871844993617323",
                    "338224876283745779021723195463464762686",
                    "317299657746041441650624568340216412263",
                    "253910612944174136291769229277328321324",
                    "331020601010040262644123326129411916786"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/modules/Nfc/+/cfbd02ac1630e339535cea673c3c4fa155fa668e",
            "signature_version": "v1"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Nfc/+/cfbd02ac1630e339535cea673c3c4fa155fa668e"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-385917501.json"
platform/packages/apps/Nfc

Package

Name
platform/packages/apps/Nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-06-01

Affected versions

Other
15

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-06-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-385917501-d1550833",
            "target": {
                "file": "src/com/android/nfc/cardemulation/HostEmulationManager.java"
            },
            "deprecated": false,
            "signature_type": "Line",
            "digest": {
                "line_hashes": [
                    "299639071472544896953607923374874997871",
                    "69855456473488956266321583577122825812",
                    "47701298142462176068089655260617139813",
                    "267070785662328580448304901090929354680",
                    "12697726497696542673553345104182918430",
                    "237880029117311268914186694112129305003",
                    "1862275835714116268160799770185025747",
                    "263420407911450921941123036412588787985"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/21e3d5ef1fe63f3b281f5123bb96d1eb0e603228",
            "signature_version": "v1"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Nfc/+/21e3d5ef1fe63f3b281f5123bb96d1eb0e603228"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-385917501.json"
platform/packages/modules/Nfc

Package

Name
platform/packages/modules/Nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-06-01

Affected versions

Other
16

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-06-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-385917501-1b0c2b36",
            "target": {
                "file": "NfcNci/src/com/android/nfc/cardemulation/HostEmulationManager.java"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "224768083718427315416357503336807362862",
                    "37724214264644538098798405521993550560",
                    "324092725361412061698026165962187219276",
                    "289818009631056797221120871844993617323",
                    "338224876283745779021723195463464762686",
                    "317299657746041441650624568340216412263",
                    "253910612944174136291769229277328321324",
                    "331020601010040262644123326129411916786"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/modules/Nfc/+/f6fc44fac696ab4ef6d148986443b9a47afc78a2",
            "signature_version": "v1"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Nfc/+/f6fc44fac696ab4ef6d148986443b9a47afc78a2"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-385917501.json"
platform/packages/modules/Nfc

Package

Name
platform/packages/modules/Nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-06-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-06-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-385917501-bbdc14ba",
            "target": {
                "file": "NfcNci/src/com/android/nfc/cardemulation/HostEmulationManager.java"
            },
            "digest": {
                "line_hashes": [
                    "224768083718427315416357503336807362862",
                    "37724214264644538098798405521993550560",
                    "324092725361412061698026165962187219276",
                    "289818009631056797221120871844993617323",
                    "338224876283745779021723195463464762686",
                    "317299657746041441650624568340216412263",
                    "253910612944174136291769229277328321324",
                    "331020601010040262644123326129411916786"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/packages/modules/Nfc/+/2d4b7ed433917f2146cbb1043b739eb8f96c0f09",
            "signature_version": "v1"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Nfc/+/2d4b7ed433917f2146cbb1043b739eb8f96c0f09"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-385917501.json"
platform/packages/apps/Nfc

Package

Name
platform/packages/apps/Nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-06-01

Affected versions

Other
14

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-06-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-385917501-5f7caa1a",
            "target": {
                "file": "src/com/android/nfc/cardemulation/HostEmulationManager.java"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "308616650717532698995966931665632827974",
                    "327380655072348916182413943021892437831",
                    "47701298142462176068089655260617139813",
                    "267070785662328580448304901090929354680",
                    "122972695254232856134433309535047921106",
                    "77998004907547833864226951402732841299",
                    "1862275835714116268160799770185025747",
                    "263420407911450921941123036412588787985"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/2e5fa5ea2cd3a8cad10616ce33c37f087486fe5f",
            "signature_version": "v1"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Nfc/+/2e5fa5ea2cd3a8cad10616ce33c37f087486fe5f"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-385917501.json"