ASB-A-499053500

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-499053500.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-499053500
Aliases
  • A-499053500
  • CVE-2026-28604
Published
2026-09-01T00:00:00Z
Modified
2026-09-09T15:15:54Z
Summary
[none]
Details

In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/modules/adb

Package

Name
platform/packages/modules/adb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-09-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/adb/+/ca8689b1047a05598bb42ff034652ea679dd6056",
        "https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "RCE"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "251411050143078781362800207094884710659",
                "length": 167
            },
            "id": "ASB-A-499053500-1d986aac",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/ca8689b1047a05598bb42ff034652ea679dd6056",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "transport_to_callback_arg"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "68259553085829812739884907925193268974",
                "length": 1172
            },
            "id": "ASB-A-499053500-2c400d7a",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4",
            "target": {
                "file": "transport.cpp",
                "function": "FdConnection::DoTlsHandshake"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "318611600218177984909965886271804270",
                "length": 540
            },
            "id": "ASB-A-499053500-2c622bc1",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "adbd_auth_tls_handshake"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "44246072668983439390148067533045825594",
                    "203184013069180869564976488290508197808",
                    "73776561674086332947366643024603928307",
                    "99787801989753570256444708657401519946",
                    "83995509246094547516431914283863239455",
                    "75072465448569609560983573560866268344",
                    "186928880968064794717981309552166894396",
                    "327178514315819310280409402158491487554",
                    "292252948304809608849331532854240803704",
                    "169858670430324741381451811478761611432",
                    "187066739170006868060777853589738041664",
                    "82651502943505659256971805190028302469",
                    "55902198275941690946834699611198111625",
                    "328438895880050661238090073356828234676",
                    "181898245955836418949660775772609290728",
                    "102201019438691637361781676995886952989"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-6008e989",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4",
            "target": {
                "file": "daemon/auth.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "303101992209649254389087675811945417231",
                "length": 689
            },
            "id": "ASB-A-499053500-933655a8",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/ca8689b1047a05598bb42ff034652ea679dd6056",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "transport_from_callback_arg"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "130202974046295831299834828345285650137",
                    "145683867620274724546197799061147682996",
                    "215688098617886272595131726506518536036",
                    "240078615845113364850537430465646078076",
                    "114568918938926965140285264357991440282",
                    "148562374208343567048870333502665971629",
                    "16320796658391830246472807516624699433",
                    "104876950020145966225700100152853406076",
                    "315592243438525867557118439768432180908",
                    "260836043150547143252473972057727797980",
                    "79416915775016457062389067088243507416",
                    "274748577855150536855196877294408582858",
                    "305137080477948318915756571928439418026",
                    "253190489779438930077609599635231739549",
                    "59930784335072035719153930868282449708",
                    "61899759422485238004047138696200606133",
                    "279199429697540242727410377611818299054",
                    "45774275508297467061854161727246750769",
                    "7280772281204450275999964719932611785",
                    "174949165858618807215963820804655827922",
                    "209064422562243965672467727307025243744",
                    "146951163939315252188604184445925761926",
                    "140384589355253479551704649993712733647",
                    "205153879203671968104626124802246577596",
                    "190649343455864397196154716729654564567",
                    "316172997185122699691985679964219091358",
                    "305177318141357131387027034715507218081",
                    "16393282775375716288707932706755601996",
                    "147400792149685589321416671485840524632"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-aea6b719",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/ca8689b1047a05598bb42ff034652ea679dd6056",
            "target": {
                "file": "daemon/auth.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "201347976594503706699311040440373831505",
                    "260874959964496991256816960723486837277",
                    "68528373089758590918458031942994462164",
                    "263143789194790534324974297836326807763",
                    "182261942998819080205463738981143913032",
                    "290533609952657922146991081198288338491",
                    "44878213353551284943375713548259719012",
                    "160743937665247659027923765464865966856",
                    "2520742642356756046183170178349274208",
                    "201099032936359238136866224047286752802",
                    "68060143319095481271821421793850309384",
                    "5574246830088354259307902012511919870",
                    "213317150644517721561367439635501440621",
                    "181647197572689677527573054911196225782",
                    "275052822347904194176585551385371514324",
                    "141414126420664879158211458890215833697",
                    "299499256615448603658019264344052132698",
                    "282433197904708193423740841891628063619",
                    "293180300263506760550338827997472878318",
                    "181021066879632656436848764839402829867",
                    "49088385692449318969729688178656988624",
                    "37463245829269288819031518132226923850",
                    "88005044251085738311195700478467671862",
                    "284607427949559937594459208626394373589",
                    "79163444189722673396353217125001346885",
                    "11925882930557433861975727949482165210",
                    "131410400069573400899665492574082094645"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-dec65120",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4",
            "target": {
                "file": "transport.cpp"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-499053500.json"
platform/packages/modules/adb

Package

Name
platform/packages/modules/adb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-09-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/adb/+/306ab4cbcb4e4dcc617cdc8bc6b9c8cad7fb3b28",
        "https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "RCE"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "85935860183145777132797809884017660843",
                "length": 692
            },
            "id": "ASB-A-499053500-1ec6f51b",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/306ab4cbcb4e4dcc617cdc8bc6b9c8cad7fb3b28",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "transport_from_callback_arg"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "201347976594503706699311040440373831505",
                    "260874959964496991256816960723486837277",
                    "68528373089758590918458031942994462164",
                    "263143789194790534324974297836326807763",
                    "182261942998819080205463738981143913032",
                    "290533609952657922146991081198288338491",
                    "44878213353551284943375713548259719012",
                    "160743937665247659027923765464865966856",
                    "2520742642356756046183170178349274208",
                    "201099032936359238136866224047286752802",
                    "68060143319095481271821421793850309384",
                    "5574246830088354259307902012511919870",
                    "213317150644517721561367439635501440621",
                    "181647197572689677527573054911196225782",
                    "275052822347904194176585551385371514324",
                    "141414126420664879158211458890215833697",
                    "299499256615448603658019264344052132698",
                    "282433197904708193423740841891628063619",
                    "293180300263506760550338827997472878318",
                    "181021066879632656436848764839402829867",
                    "49088385692449318969729688178656988624",
                    "37463245829269288819031518132226923850",
                    "88005044251085738311195700478467671862",
                    "284607427949559937594459208626394373589",
                    "79163444189722673396353217125001346885",
                    "11925882930557433861975727949482165210",
                    "131410400069573400899665492574082094645"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-25ae40f5",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5",
            "target": {
                "file": "transport.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "68259553085829812739884907925193268974",
                "length": 1172
            },
            "id": "ASB-A-499053500-45f1eb5a",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5",
            "target": {
                "file": "transport.cpp",
                "function": "FdConnection::DoTlsHandshake"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "133808897306689608483968929535118343161",
                "length": 173
            },
            "id": "ASB-A-499053500-49f87ada",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/306ab4cbcb4e4dcc617cdc8bc6b9c8cad7fb3b28",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "transport_to_callback_arg"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "44246072668983439390148067533045825594",
                    "203184013069180869564976488290508197808",
                    "73776561674086332947366643024603928307",
                    "184857570419323916123490812049974724612",
                    "290664200632557086196763467274379677126",
                    "208919262436688842009814335991146917233",
                    "169015762045903549219684152073238021201",
                    "327178514315819310280409402158491487554",
                    "292252948304809608849331532854240803704",
                    "169858670430324741381451811478761611432",
                    "187066739170006868060777853589738041664",
                    "82651502943505659256971805190028302469",
                    "55902198275941690946834699611198111625",
                    "328438895880050661238090073356828234676",
                    "181898245955836418949660775772609290728",
                    "102201019438691637361781676995886952989"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-7b8a84b7",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5",
            "target": {
                "file": "daemon/auth.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "173010739123097531698422802604818074965",
                    "169907421080577288046512616546451649334",
                    "242404074545630772428486324107250096290",
                    "235136211121210597119348234449832974424",
                    "114568918938926965140285264357991440282",
                    "148562374208343567048870333502665971629",
                    "180747833584260176571626941026277047507",
                    "144137230564792780644792149799228877342",
                    "91066934623729648335345421246102721187",
                    "279084401777254444616660845934857851487",
                    "79416915775016457062389067088243507416",
                    "274748577855150536855196877294408582858",
                    "305137080477948318915756571928439418026",
                    "253190489779438930077609599635231739549",
                    "59930784335072035719153930868282449708",
                    "4802944779634811330769744236131475220",
                    "6439038411777416290037256764578651439",
                    "288964617236352188856265710168258280597",
                    "56910755955193388828915161095086884337",
                    "171092454944421598675340368580904739427",
                    "209064422562243965672467727307025243744",
                    "146951163939315252188604184445925761926",
                    "140384589355253479551704649993712733647",
                    "205153879203671968104626124802246577596",
                    "190649343455864397196154716729654564567",
                    "316958103376571296710332603775344713259",
                    "264507402409785977953938045986812816701",
                    "198378422093956137436608922772874447265",
                    "11468761926324111724005659517500638589"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-ea9210c9",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/306ab4cbcb4e4dcc617cdc8bc6b9c8cad7fb3b28",
            "target": {
                "file": "daemon/auth.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "203990001823878910352410494377031318040",
                "length": 540
            },
            "id": "ASB-A-499053500-f60e9b71",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "adbd_auth_tls_handshake"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-499053500.json"
platform/packages/modules/adb

Package

Name
platform/packages/modules/adb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-09-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/adb/+/82897f1dd7435a64f01b815fc58e9f417835a63b",
        "https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "RCE"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "133808897306689608483968929535118343161",
                "length": 173
            },
            "id": "ASB-A-499053500-110347fa",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/82897f1dd7435a64f01b815fc58e9f417835a63b",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "transport_to_callback_arg"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "173010739123097531698422802604818074965",
                    "169907421080577288046512616546451649334",
                    "242404074545630772428486324107250096290",
                    "235136211121210597119348234449832974424",
                    "114568918938926965140285264357991440282",
                    "148562374208343567048870333502665971629",
                    "180747833584260176571626941026277047507",
                    "144137230564792780644792149799228877342",
                    "91066934623729648335345421246102721187",
                    "279084401777254444616660845934857851487",
                    "79416915775016457062389067088243507416",
                    "274748577855150536855196877294408582858",
                    "305137080477948318915756571928439418026",
                    "253190489779438930077609599635231739549",
                    "59930784335072035719153930868282449708",
                    "4802944779634811330769744236131475220",
                    "6439038411777416290037256764578651439",
                    "288964617236352188856265710168258280597",
                    "56910755955193388828915161095086884337",
                    "171092454944421598675340368580904739427",
                    "209064422562243965672467727307025243744",
                    "146951163939315252188604184445925761926",
                    "140384589355253479551704649993712733647",
                    "205153879203671968104626124802246577596",
                    "190649343455864397196154716729654564567",
                    "316958103376571296710332603775344713259",
                    "264507402409785977953938045986812816701",
                    "198378422093956137436608922772874447265",
                    "11468761926324111724005659517500638589"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-1e716e92",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/82897f1dd7435a64f01b815fc58e9f417835a63b",
            "target": {
                "file": "daemon/auth.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "201347976594503706699311040440373831505",
                    "260874959964496991256816960723486837277",
                    "68528373089758590918458031942994462164",
                    "263143789194790534324974297836326807763",
                    "182261942998819080205463738981143913032",
                    "290533609952657922146991081198288338491",
                    "44878213353551284943375713548259719012",
                    "160743937665247659027923765464865966856",
                    "2520742642356756046183170178349274208",
                    "201099032936359238136866224047286752802",
                    "68060143319095481271821421793850309384",
                    "5574246830088354259307902012511919870",
                    "213317150644517721561367439635501440621",
                    "181647197572689677527573054911196225782",
                    "275052822347904194176585551385371514324",
                    "141414126420664879158211458890215833697",
                    "299499256615448603658019264344052132698",
                    "282433197904708193423740841891628063619",
                    "293180300263506760550338827997472878318",
                    "181021066879632656436848764839402829867",
                    "49088385692449318969729688178656988624",
                    "37463245829269288819031518132226923850",
                    "88005044251085738311195700478467671862",
                    "284607427949559937594459208626394373589",
                    "79163444189722673396353217125001346885",
                    "11925882930557433861975727949482165210",
                    "131410400069573400899665492574082094645"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-7a70d0e3",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8",
            "target": {
                "file": "transport.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "68259553085829812739884907925193268974",
                "length": 1172
            },
            "id": "ASB-A-499053500-89f4edf4",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8",
            "target": {
                "file": "transport.cpp",
                "function": "FdConnection::DoTlsHandshake"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "44246072668983439390148067533045825594",
                    "203184013069180869564976488290508197808",
                    "73776561674086332947366643024603928307",
                    "99787801989753570256444708657401519946",
                    "83995509246094547516431914283863239455",
                    "75072465448569609560983573560866268344",
                    "186928880968064794717981309552166894396",
                    "327178514315819310280409402158491487554",
                    "292252948304809608849331532854240803704",
                    "169858670430324741381451811478761611432",
                    "187066739170006868060777853589738041664",
                    "82651502943505659256971805190028302469",
                    "55902198275941690946834699611198111625",
                    "328438895880050661238090073356828234676",
                    "181898245955836418949660775772609290728",
                    "102201019438691637361781676995886952989"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-a73e3235",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8",
            "target": {
                "file": "daemon/auth.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "318611600218177984909965886271804270",
                "length": 540
            },
            "id": "ASB-A-499053500-eb9de58b",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "adbd_auth_tls_handshake"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "85935860183145777132797809884017660843",
                "length": 692
            },
            "id": "ASB-A-499053500-ffbacdd8",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/82897f1dd7435a64f01b815fc58e9f417835a63b",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "transport_from_callback_arg"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-499053500.json"
platform/packages/modules/adb

Package

Name
platform/packages/modules/adb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-09-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/adb/+/a5030c6e218a9d81cebdca4da77021ece883f782",
        "https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "RCE"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "133808897306689608483968929535118343161",
                "length": 173
            },
            "id": "ASB-A-499053500-0f3a4040",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/a5030c6e218a9d81cebdca4da77021ece883f782",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "transport_to_callback_arg"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "201347976594503706699311040440373831505",
                    "260874959964496991256816960723486837277",
                    "68528373089758590918458031942994462164",
                    "263143789194790534324974297836326807763",
                    "182261942998819080205463738981143913032",
                    "290533609952657922146991081198288338491",
                    "44878213353551284943375713548259719012",
                    "160743937665247659027923765464865966856",
                    "2520742642356756046183170178349274208",
                    "201099032936359238136866224047286752802",
                    "68060143319095481271821421793850309384",
                    "5574246830088354259307902012511919870",
                    "213317150644517721561367439635501440621",
                    "181647197572689677527573054911196225782",
                    "275052822347904194176585551385371514324",
                    "141414126420664879158211458890215833697",
                    "299499256615448603658019264344052132698",
                    "282433197904708193423740841891628063619",
                    "293180300263506760550338827997472878318",
                    "181021066879632656436848764839402829867",
                    "49088385692449318969729688178656988624",
                    "37463245829269288819031518132226923850",
                    "88005044251085738311195700478467671862",
                    "284607427949559937594459208626394373589",
                    "79163444189722673396353217125001346885",
                    "11925882930557433861975727949482165210",
                    "131410400069573400899665492574082094645"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-3032202e",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c",
            "target": {
                "file": "transport.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "85935860183145777132797809884017660843",
                "length": 692
            },
            "id": "ASB-A-499053500-34b06a77",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/a5030c6e218a9d81cebdca4da77021ece883f782",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "transport_from_callback_arg"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "68259553085829812739884907925193268974",
                "length": 1172
            },
            "id": "ASB-A-499053500-356f969c",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c",
            "target": {
                "file": "transport.cpp",
                "function": "FdConnection::DoTlsHandshake"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "318611600218177984909965886271804270",
                "length": 540
            },
            "id": "ASB-A-499053500-3ccdbacc",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "adbd_auth_tls_handshake"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "173010739123097531698422802604818074965",
                    "169907421080577288046512616546451649334",
                    "242404074545630772428486324107250096290",
                    "235136211121210597119348234449832974424",
                    "114568918938926965140285264357991440282",
                    "148562374208343567048870333502665971629",
                    "180747833584260176571626941026277047507",
                    "144137230564792780644792149799228877342",
                    "91066934623729648335345421246102721187",
                    "279084401777254444616660845934857851487",
                    "79416915775016457062389067088243507416",
                    "274748577855150536855196877294408582858",
                    "305137080477948318915756571928439418026",
                    "253190489779438930077609599635231739549",
                    "59930784335072035719153930868282449708",
                    "4802944779634811330769744236131475220",
                    "6439038411777416290037256764578651439",
                    "288964617236352188856265710168258280597",
                    "56910755955193388828915161095086884337",
                    "171092454944421598675340368580904739427",
                    "209064422562243965672467727307025243744",
                    "146951163939315252188604184445925761926",
                    "140384589355253479551704649993712733647",
                    "205153879203671968104626124802246577596",
                    "190649343455864397196154716729654564567",
                    "316958103376571296710332603775344713259",
                    "264507402409785977953938045986812816701",
                    "198378422093956137436608922772874447265",
                    "11468761926324111724005659517500638589"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-3d8da35f",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/a5030c6e218a9d81cebdca4da77021ece883f782",
            "target": {
                "file": "daemon/auth.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "44246072668983439390148067533045825594",
                    "203184013069180869564976488290508197808",
                    "73776561674086332947366643024603928307",
                    "99787801989753570256444708657401519946",
                    "83995509246094547516431914283863239455",
                    "75072465448569609560983573560866268344",
                    "186928880968064794717981309552166894396",
                    "327178514315819310280409402158491487554",
                    "292252948304809608849331532854240803704",
                    "169858670430324741381451811478761611432",
                    "187066739170006868060777853589738041664",
                    "82651502943505659256971805190028302469",
                    "55902198275941690946834699611198111625",
                    "328438895880050661238090073356828234676",
                    "181898245955836418949660775772609290728",
                    "102201019438691637361781676995886952989"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-54f3bea1",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c",
            "target": {
                "file": "daemon/auth.cpp"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-499053500.json"
platform/packages/modules/adb

Package

Name
platform/packages/modules/adb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-09-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/adb/+/ea885606faf989081914b3aa699d42d0a46abb28",
        "https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "RCE"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "173010739123097531698422802604818074965",
                    "169907421080577288046512616546451649334",
                    "242404074545630772428486324107250096290",
                    "235136211121210597119348234449832974424",
                    "114568918938926965140285264357991440282",
                    "148562374208343567048870333502665971629",
                    "180747833584260176571626941026277047507",
                    "144137230564792780644792149799228877342",
                    "91066934623729648335345421246102721187",
                    "279084401777254444616660845934857851487",
                    "79416915775016457062389067088243507416",
                    "274748577855150536855196877294408582858",
                    "305137080477948318915756571928439418026",
                    "253190489779438930077609599635231739549",
                    "59930784335072035719153930868282449708",
                    "4802944779634811330769744236131475220",
                    "6439038411777416290037256764578651439",
                    "288964617236352188856265710168258280597",
                    "56910755955193388828915161095086884337",
                    "171092454944421598675340368580904739427",
                    "209064422562243965672467727307025243744",
                    "146951163939315252188604184445925761926",
                    "140384589355253479551704649993712733647",
                    "205153879203671968104626124802246577596",
                    "190649343455864397196154716729654564567",
                    "316958103376571296710332603775344713259",
                    "264507402409785977953938045986812816701",
                    "198378422093956137436608922772874447265",
                    "11468761926324111724005659517500638589"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-06e8f7f4",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/ea885606faf989081914b3aa699d42d0a46abb28",
            "target": {
                "file": "daemon/auth.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "44246072668983439390148067533045825594",
                    "203184013069180869564976488290508197808",
                    "73776561674086332947366643024603928307",
                    "99787801989753570256444708657401519946",
                    "83995509246094547516431914283863239455",
                    "75072465448569609560983573560866268344",
                    "186928880968064794717981309552166894396",
                    "327178514315819310280409402158491487554",
                    "292252948304809608849331532854240803704",
                    "169858670430324741381451811478761611432",
                    "187066739170006868060777853589738041664",
                    "82651502943505659256971805190028302469",
                    "55902198275941690946834699611198111625",
                    "328438895880050661238090073356828234676",
                    "181898245955836418949660775772609290728",
                    "102201019438691637361781676995886952989"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-0b141983",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87",
            "target": {
                "file": "daemon/auth.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "133808897306689608483968929535118343161",
                "length": 173
            },
            "id": "ASB-A-499053500-0cfac820",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/ea885606faf989081914b3aa699d42d0a46abb28",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "transport_to_callback_arg"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "68259553085829812739884907925193268974",
                "length": 1172
            },
            "id": "ASB-A-499053500-3924540e",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87",
            "target": {
                "file": "transport.cpp",
                "function": "FdConnection::DoTlsHandshake"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "318611600218177984909965886271804270",
                "length": 540
            },
            "id": "ASB-A-499053500-4449f9ea",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "adbd_auth_tls_handshake"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "201347976594503706699311040440373831505",
                    "260874959964496991256816960723486837277",
                    "68528373089758590918458031942994462164",
                    "263143789194790534324974297836326807763",
                    "182261942998819080205463738981143913032",
                    "290533609952657922146991081198288338491",
                    "44878213353551284943375713548259719012",
                    "160743937665247659027923765464865966856",
                    "2520742642356756046183170178349274208",
                    "201099032936359238136866224047286752802",
                    "68060143319095481271821421793850309384",
                    "5574246830088354259307902012511919870",
                    "213317150644517721561367439635501440621",
                    "181647197572689677527573054911196225782",
                    "275052822347904194176585551385371514324",
                    "141414126420664879158211458890215833697",
                    "299499256615448603658019264344052132698",
                    "282433197904708193423740841891628063619",
                    "293180300263506760550338827997472878318",
                    "181021066879632656436848764839402829867",
                    "49088385692449318969729688178656988624",
                    "37463245829269288819031518132226923850",
                    "88005044251085738311195700478467671862",
                    "284607427949559937594459208626394373589",
                    "79163444189722673396353217125001346885",
                    "11925882930557433861975727949482165210",
                    "131410400069573400899665492574082094645"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-c56cbd73",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87",
            "target": {
                "file": "transport.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "85935860183145777132797809884017660843",
                "length": 692
            },
            "id": "ASB-A-499053500-e1bc7b1d",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/ea885606faf989081914b3aa699d42d0a46abb28",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "transport_from_callback_arg"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-499053500.json"
platform/packages/modules/adb

Package

Name
platform/packages/modules/adb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-09-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/adb/+/bdc7a2c6f0390541d4f26e1dc4ba326adbffaaa0",
        "https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "RCE"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "85935860183145777132797809884017660843",
                "length": 692
            },
            "id": "ASB-A-499053500-269ac13f",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/bdc7a2c6f0390541d4f26e1dc4ba326adbffaaa0",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "transport_from_callback_arg"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "133808897306689608483968929535118343161",
                "length": 173
            },
            "id": "ASB-A-499053500-37ae3633",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/bdc7a2c6f0390541d4f26e1dc4ba326adbffaaa0",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "transport_to_callback_arg"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "68259553085829812739884907925193268974",
                "length": 1172
            },
            "id": "ASB-A-499053500-41d6920d",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82",
            "target": {
                "file": "transport.cpp",
                "function": "FdConnection::DoTlsHandshake"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "201347976594503706699311040440373831505",
                    "260874959964496991256816960723486837277",
                    "68528373089758590918458031942994462164",
                    "263143789194790534324974297836326807763",
                    "182261942998819080205463738981143913032",
                    "290533609952657922146991081198288338491",
                    "44878213353551284943375713548259719012",
                    "160743937665247659027923765464865966856",
                    "2520742642356756046183170178349274208",
                    "201099032936359238136866224047286752802",
                    "68060143319095481271821421793850309384",
                    "5574246830088354259307902012511919870",
                    "213317150644517721561367439635501440621",
                    "181647197572689677527573054911196225782",
                    "275052822347904194176585551385371514324",
                    "141414126420664879158211458890215833697",
                    "299499256615448603658019264344052132698",
                    "282433197904708193423740841891628063619",
                    "293180300263506760550338827997472878318",
                    "181021066879632656436848764839402829867",
                    "49088385692449318969729688178656988624",
                    "37463245829269288819031518132226923850",
                    "88005044251085738311195700478467671862",
                    "284607427949559937594459208626394373589",
                    "79163444189722673396353217125001346885",
                    "11925882930557433861975727949482165210",
                    "131410400069573400899665492574082094645"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-46c7d6c2",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82",
            "target": {
                "file": "transport.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "173010739123097531698422802604818074965",
                    "169907421080577288046512616546451649334",
                    "242404074545630772428486324107250096290",
                    "235136211121210597119348234449832974424",
                    "114568918938926965140285264357991440282",
                    "148562374208343567048870333502665971629",
                    "180747833584260176571626941026277047507",
                    "144137230564792780644792149799228877342",
                    "91066934623729648335345421246102721187",
                    "279084401777254444616660845934857851487",
                    "79416915775016457062389067088243507416",
                    "274748577855150536855196877294408582858",
                    "305137080477948318915756571928439418026",
                    "253190489779438930077609599635231739549",
                    "59930784335072035719153930868282449708",
                    "4802944779634811330769744236131475220",
                    "6439038411777416290037256764578651439",
                    "288964617236352188856265710168258280597",
                    "56910755955193388828915161095086884337",
                    "171092454944421598675340368580904739427",
                    "209064422562243965672467727307025243744",
                    "146951163939315252188604184445925761926",
                    "140384589355253479551704649993712733647",
                    "205153879203671968104626124802246577596",
                    "190649343455864397196154716729654564567",
                    "316958103376571296710332603775344713259",
                    "264507402409785977953938045986812816701",
                    "198378422093956137436608922772874447265",
                    "11468761926324111724005659517500638589"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-5c6976ea",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/bdc7a2c6f0390541d4f26e1dc4ba326adbffaaa0",
            "target": {
                "file": "daemon/auth.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "203990001823878910352410494377031318040",
                "length": 540
            },
            "id": "ASB-A-499053500-782bd627",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82",
            "target": {
                "file": "daemon/auth.cpp",
                "function": "adbd_auth_tls_handshake"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "44246072668983439390148067533045825594",
                    "203184013069180869564976488290508197808",
                    "73776561674086332947366643024603928307",
                    "184857570419323916123490812049974724612",
                    "290664200632557086196763467274379677126",
                    "208919262436688842009814335991146917233",
                    "169015762045903549219684152073238021201",
                    "327178514315819310280409402158491487554",
                    "292252948304809608849331532854240803704",
                    "169858670430324741381451811478761611432",
                    "187066739170006868060777853589738041664",
                    "82651502943505659256971805190028302469",
                    "55902198275941690946834699611198111625",
                    "328438895880050661238090073356828234676",
                    "181898245955836418949660775772609290728",
                    "102201019438691637361781676995886952989"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-499053500-7a30dd6b",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82",
            "target": {
                "file": "daemon/auth.cpp"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-499053500.json"