ASB-A-522373825

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-522373825.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-522373825
Aliases
  • A-522373825
  • CVE-2026-59028
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T16:56:19Z
Summary
[none]
Details

In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/modules/Nfc

Package

Name
platform/packages/modules/Nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/modules/Nfc/+/a810afd69488a55248e17e1ef94c9dc9d9c11608"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "265928023664238408722650893218740478691",
                "length":  3566
            },
            "id":  "ASB-A-522373825-1eafc145",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Nfc/+/a810afd69488a55248e17e1ef94c9dc9d9c11608",
            "target":  {
                "file":  "NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java",
                "function":  "resolveAidConflictLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "306818195370565809325377590687793782952",
                    "274582545198659872994016440925987448491",
                    "62990015994409936974287230004420250731",
                    "91408781466968858845307733352226215089",
                    "97611472942514387544339195174586080472",
                    "135689961710789054162583161441643340575",
                    "38273128420282599557823661933830414111",
                    "56402293073574025692410360036437137182",
                    "306852349687099053977963613936631239563",
                    "287744229732938287108597001156320832790",
                    "315759275126819732316670767498268300326",
                    "224514692031900788763314193016795778833",
                    "262560585798237266602341068871246722111"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-522373825-7ab4f118",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Nfc/+/a810afd69488a55248e17e1ef94c9dc9d9c11608",
            "target":  {
                "file":  "NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "51503526070660967392803370877024488461",
                "length":  2651
            },
            "id":  "ASB-A-522373825-ab8f88e2",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Nfc/+/a810afd69488a55248e17e1ef94c9dc9d9c11608",
            "target":  {
                "file":  "NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java",
                "function":  "resolveAidConflictLocked"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-522373825.json"
platform/packages/apps/Nfc

Package

Name
platform/packages/apps/Nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/apps/Nfc/+/090c5c3bb70b4350cc495ffbed3aed54be2f4767"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "158732649799380634307256924704112694204",
                "length":  2425
            },
            "id":  "ASB-A-522373825-34b08d11",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Nfc/+/090c5c3bb70b4350cc495ffbed3aed54be2f4767",
            "target":  {
                "file":  "src/com/android/nfc/cardemulation/RegisteredAidCache.java",
                "function":  "resolveAidConflictLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "297951326009822698519460294502520530822",
                "length":  2570
            },
            "id":  "ASB-A-522373825-8c2dee0f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Nfc/+/090c5c3bb70b4350cc495ffbed3aed54be2f4767",
            "target":  {
                "file":  "src/com/android/nfc/cardemulation/RegisteredAidCache.java",
                "function":  "resolveAidConflictLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "150971658409956539972988160756512166704",
                    "261828516749889997301603641465396620360",
                    "71372986022485986898190461602793759398",
                    "91408781466968858845307733352226215089",
                    "97611472942514387544339195174586080472",
                    "113172363721416971795201575162516106853",
                    "288439348378415454978016270404534407163",
                    "38273128420282599557823661933830414111",
                    "246799484598677769987456967882418985772",
                    "49924606287640992802817283926128671581",
                    "177584893863937796778049700843312674647",
                    "53156013376983319427733069093502617797",
                    "65272975156520916600768357955978497764"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-522373825-8d358053",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Nfc/+/090c5c3bb70b4350cc495ffbed3aed54be2f4767",
            "target":  {
                "file":  "src/com/android/nfc/cardemulation/RegisteredAidCache.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-522373825.json"
platform/packages/modules/Nfc

Package

Name
platform/packages/modules/Nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/modules/Nfc/+/0ab1d66e54edc7fdd64c2236578a8839793b1408"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "62420813378767436160727005269590283101",
                "length":  2644
            },
            "id":  "ASB-A-522373825-b4d777a0",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Nfc/+/0ab1d66e54edc7fdd64c2236578a8839793b1408",
            "target":  {
                "file":  "NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java",
                "function":  "resolveAidConflictLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "207330028648753242523987987365816363547",
                "length":  3507
            },
            "id":  "ASB-A-522373825-b503604f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Nfc/+/0ab1d66e54edc7fdd64c2236578a8839793b1408",
            "target":  {
                "file":  "NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java",
                "function":  "resolveAidConflictLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "306818195370565809325377590687793782952",
                    "274582545198659872994016440925987448491",
                    "62990015994409936974287230004420250731",
                    "91408781466968858845307733352226215089",
                    "97611472942514387544339195174586080472",
                    "135689961710789054162583161441643340575",
                    "38273128420282599557823661933830414111",
                    "269587506768809283590619312510475097010",
                    "217800789033221475240799590571686882908",
                    "83479519267321003115826213305194270360",
                    "290344604867298189197057658963653495059",
                    "224514692031900788763314193016795778833",
                    "262560585798237266602341068871246722111"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-522373825-bd4da341",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Nfc/+/0ab1d66e54edc7fdd64c2236578a8839793b1408",
            "target":  {
                "file":  "NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-522373825.json"
platform/packages/modules/Nfc

Package

Name
platform/packages/modules/Nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/modules/Nfc/+/7e11b6d4081a973737aedca82ac46c6d55a8ef7c"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "275175868987105713552315984552205134603",
                "length":  3619
            },
            "id":  "ASB-A-522373825-34ecc396",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Nfc/+/7e11b6d4081a973737aedca82ac46c6d55a8ef7c",
            "target":  {
                "file":  "NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java",
                "function":  "resolveAidConflictLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "51503526070660967392803370877024488461",
                "length":  2651
            },
            "id":  "ASB-A-522373825-4fba43d2",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Nfc/+/7e11b6d4081a973737aedca82ac46c6d55a8ef7c",
            "target":  {
                "file":  "NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java",
                "function":  "resolveAidConflictLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "306818195370565809325377590687793782952",
                    "274582545198659872994016440925987448491",
                    "62990015994409936974287230004420250731",
                    "91408781466968858845307733352226215089",
                    "97611472942514387544339195174586080472",
                    "135689961710789054162583161441643340575",
                    "38273128420282599557823661933830414111",
                    "56402293073574025692410360036437137182",
                    "306852349687099053977963613936631239563",
                    "287744229732938287108597001156320832790",
                    "315759275126819732316670767498268300326",
                    "224514692031900788763314193016795778833",
                    "262560585798237266602341068871246722111"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-522373825-bd007076",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Nfc/+/7e11b6d4081a973737aedca82ac46c6d55a8ef7c",
            "target":  {
                "file":  "NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-522373825.json"
platform/packages/modules/Nfc

Package

Name
platform/packages/modules/Nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/modules/Nfc/+/5727f605d44162b09f0e2fe92e273818637146cc"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "306818195370565809325377590687793782952",
                    "274582545198659872994016440925987448491",
                    "62990015994409936974287230004420250731",
                    "91408781466968858845307733352226215089",
                    "97611472942514387544339195174586080472",
                    "135689961710789054162583161441643340575",
                    "38273128420282599557823661933830414111",
                    "56402293073574025692410360036437137182",
                    "306852349687099053977963613936631239563",
                    "287744229732938287108597001156320832790",
                    "315759275126819732316670767498268300326",
                    "224514692031900788763314193016795778833",
                    "262560585798237266602341068871246722111"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-522373825-06bcaab2",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Nfc/+/5727f605d44162b09f0e2fe92e273818637146cc",
            "target":  {
                "file":  "NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "265928023664238408722650893218740478691",
                "length":  3566
            },
            "id":  "ASB-A-522373825-c294b291",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Nfc/+/5727f605d44162b09f0e2fe92e273818637146cc",
            "target":  {
                "file":  "NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java",
                "function":  "resolveAidConflictLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "51503526070660967392803370877024488461",
                "length":  2651
            },
            "id":  "ASB-A-522373825-c6484b1f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Nfc/+/5727f605d44162b09f0e2fe92e273818637146cc",
            "target":  {
                "file":  "NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java",
                "function":  "resolveAidConflictLocked"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-522373825.json"