ASB-A-519884370

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-519884370.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-519884370
Aliases
  • A-519884370
  • CVE-2026-59002
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T16:56:14Z
Summary
[none]
Details

In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/f257fe7809282fa3c34e31851df99ad9f2f803ab"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "18237245118701700326200780875349528246",
                "length":  3102
            },
            "id":  "ASB-A-519884370-17c82d2d",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/f257fe7809282fa3c34e31851df99ad9f2f803ab",
            "target":  {
                "file":  "services/usb/java/com/android/server/usb/UsbDeviceManager.java",
                "function":  "handleMessage"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "185997006276593719974238053503278319575",
                    "93906479424819124857740885275296440180",
                    "259454809899761942225616410753409181268",
                    "153345524672967060248689445871995406367",
                    "291374424344446462852108375233167684634",
                    "140221536153661281371407326755103500234",
                    "208979599059720471021125682829406010814",
                    "195803785267529664721182660969326938275",
                    "163084432054370082767565117614665984723",
                    "335831948167273581854191276434470828077",
                    "298577085831459822992571937442984016915"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-519884370-8182f700",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/f257fe7809282fa3c34e31851df99ad9f2f803ab",
            "target":  {
                "file":  "services/usb/java/com/android/server/usb/UsbDeviceManager.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-519884370.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/ee0f41705ee6a4006f62c30e0538cdd6ee38b3a4"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "185997006276593719974238053503278319575",
                    "93906479424819124857740885275296440180",
                    "259454809899761942225616410753409181268",
                    "153345524672967060248689445871995406367",
                    "291374424344446462852108375233167684634",
                    "140221536153661281371407326755103500234",
                    "208979599059720471021125682829406010814",
                    "195803785267529664721182660969326938275",
                    "163084432054370082767565117614665984723",
                    "335831948167273581854191276434470828077",
                    "298577085831459822992571937442984016915"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-519884370-212d9cbd",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ee0f41705ee6a4006f62c30e0538cdd6ee38b3a4",
            "target":  {
                "file":  "services/usb/java/com/android/server/usb/UsbDeviceManager.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "195840142014621201303541102181351292658",
                "length":  2898
            },
            "id":  "ASB-A-519884370-8519ee08",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ee0f41705ee6a4006f62c30e0538cdd6ee38b3a4",
            "target":  {
                "file":  "services/usb/java/com/android/server/usb/UsbDeviceManager.java",
                "function":  "handleMessage"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-519884370.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/889c5494dfe0be59755beeb687ad7c84df92d038"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "185997006276593719974238053503278319575",
                    "93906479424819124857740885275296440180",
                    "259454809899761942225616410753409181268",
                    "153345524672967060248689445871995406367",
                    "291374424344446462852108375233167684634",
                    "140221536153661281371407326755103500234",
                    "208979599059720471021125682829406010814",
                    "195803785267529664721182660969326938275",
                    "163084432054370082767565117614665984723",
                    "335831948167273581854191276434470828077",
                    "298577085831459822992571937442984016915"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-519884370-50469fa6",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/889c5494dfe0be59755beeb687ad7c84df92d038",
            "target":  {
                "file":  "services/usb/java/com/android/server/usb/UsbDeviceManager.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "195840142014621201303541102181351292658",
                "length":  2898
            },
            "id":  "ASB-A-519884370-72e1be17",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/889c5494dfe0be59755beeb687ad7c84df92d038",
            "target":  {
                "file":  "services/usb/java/com/android/server/usb/UsbDeviceManager.java",
                "function":  "handleMessage"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-519884370.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/5432b804c313db814cfaac328bc3047d625c69c5"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "185997006276593719974238053503278319575",
                    "93906479424819124857740885275296440180",
                    "259454809899761942225616410753409181268",
                    "153345524672967060248689445871995406367",
                    "291374424344446462852108375233167684634",
                    "140221536153661281371407326755103500234",
                    "208979599059720471021125682829406010814",
                    "195803785267529664721182660969326938275",
                    "163084432054370082767565117614665984723",
                    "335831948167273581854191276434470828077",
                    "298577085831459822992571937442984016915"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-519884370-03befc44",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/5432b804c313db814cfaac328bc3047d625c69c5",
            "target":  {
                "file":  "services/usb/java/com/android/server/usb/UsbDeviceManager.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "195840142014621201303541102181351292658",
                "length":  2898
            },
            "id":  "ASB-A-519884370-14259ee7",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/5432b804c313db814cfaac328bc3047d625c69c5",
            "target":  {
                "file":  "services/usb/java/com/android/server/usb/UsbDeviceManager.java",
                "function":  "handleMessage"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-519884370.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/25ff242509e57e58376b3b94561fe7e57a0567f8"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "18237245118701700326200780875349528246",
                "length":  3102
            },
            "id":  "ASB-A-519884370-be31a26e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/25ff242509e57e58376b3b94561fe7e57a0567f8",
            "target":  {
                "file":  "services/usb/java/com/android/server/usb/UsbDeviceManager.java",
                "function":  "handleMessage"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "185997006276593719974238053503278319575",
                    "93906479424819124857740885275296440180",
                    "259454809899761942225616410753409181268",
                    "153345524672967060248689445871995406367",
                    "291374424344446462852108375233167684634",
                    "140221536153661281371407326755103500234",
                    "208979599059720471021125682829406010814",
                    "195803785267529664721182660969326938275",
                    "163084432054370082767565117614665984723",
                    "335831948167273581854191276434470828077",
                    "298577085831459822992571937442984016915"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-519884370-cb844871",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/25ff242509e57e58376b3b94561fe7e57a0567f8",
            "target":  {
                "file":  "services/usb/java/com/android/server/usb/UsbDeviceManager.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-519884370.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-11-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/2db753371d1cf8c093ee4ab80f0b6682f724a400"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "185997006276593719974238053503278319575",
                    "93906479424819124857740885275296440180",
                    "259454809899761942225616410753409181268",
                    "153345524672967060248689445871995406367",
                    "291374424344446462852108375233167684634",
                    "140221536153661281371407326755103500234",
                    "208979599059720471021125682829406010814",
                    "195803785267529664721182660969326938275",
                    "163084432054370082767565117614665984723",
                    "335831948167273581854191276434470828077",
                    "298577085831459822992571937442984016915"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-519884370-709c0b2f",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2db753371d1cf8c093ee4ab80f0b6682f724a400",
            "target":  {
                "file":  "services/usb/java/com/android/server/usb/UsbDeviceManager.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "195840142014621201303541102181351292658",
                "length":  2898
            },
            "id":  "ASB-A-519884370-8f6c7287",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2db753371d1cf8c093ee4ab80f0b6682f724a400",
            "target":  {
                "file":  "services/usb/java/com/android/server/usb/UsbDeviceManager.java",
                "function":  "handleMessage"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-519884370.json"