{"id":"ASB-A-290364858","details":"In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-290364858","CVE-2026-0050"],"modified":"2026-06-03T15:06:08.149995907Z","published":"2026-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-06-01"}],"affected":[{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-06-01"}]}],"versions":["17-next"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"id":"ASB-A-290364858-162f9859","signature_type":"Line","digest":{"line_hashes":["305864466510637534793017076661939241314","24721725675103257489470149858387334317","122429301842912345656125589581716678867","39637882632034451169684967801581127109","29202412039906249954192024093881753390","88356096102476975710748304975988160523","21057023394588027097121282481923918046","20251326410565350043523602827334968240"],"threshold":0.9},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/921aaec06df0b5974d0fbbb40443935b15019270","target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java"},"signature_version":"v1"},{"id":"ASB-A-290364858-c5daea1d","signature_type":"Line","digest":{"line_hashes":["104864745248922639475810203119796420289","57191062265804137688065769567100330434","139015719142191469842233776694246710775","214489612472956584036118295522973027834","53716967109777148551067975742120209826"],"threshold":0.9},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/afca6806043387957c3730c7465f75b1ec407f63","target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java"},"signature_version":"v1"},{"id":"ASB-A-290364858-cec919c0","signature_type":"Function","digest":{"function_hash":"265628521590673445795170880413659405486","length":1144},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/afca6806043387957c3730c7465f75b1ec407f63","target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java","function":"handleBondStateChanged"},"signature_version":"v1"},{"id":"ASB-A-290364858-d7dfed47","signature_type":"Function","digest":{"function_hash":"258490044447819165761890927399281273261","length":1583},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/921aaec06df0b5974d0fbbb40443935b15019270","target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java","function":"handleBondStateChanged"},"signature_version":"v1"}],"spl":"2026-06-01","severity":"High","fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/921aaec06df0b5974d0fbbb40443935b15019270","https://android.googlesource.com/platform/packages/modules/Bluetooth/+/afca6806043387957c3730c7465f75b1ec407f63"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-290364858.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-06-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9c2be9f0da10486e20658fcb68ee2669ffdfe9f4"],"vanir_signatures":[{"id":"ASB-A-290364858-c02e8fb6","signature_type":"Function","digest":{"function_hash":"158872981596593419989496199545895507206","length":1583},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9c2be9f0da10486e20658fcb68ee2669ffdfe9f4","target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java","function":"handleBondStateChanged"},"signature_version":"v1"},{"id":"ASB-A-290364858-de21e132","signature_type":"Line","digest":{"line_hashes":["14463957989382354865736227327803955519","170130348391427609667341272047701606877","29202412039906249954192024093881753390","88356096102476975710748304975988160523","21057023394588027097121282481923918046","20251326410565350043523602827334968240"],"threshold":0.9},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9c2be9f0da10486e20658fcb68ee2669ffdfe9f4","target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java"},"signature_version":"v1"}],"severity":"High","types":["ID"],"spl":"2026-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-290364858.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-06-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/f83a53408ee5055c4e0b2a0dc7692811b78be7c9"],"vanir_signatures":[{"id":"ASB-A-290364858-3eabcbc6","signature_type":"Function","digest":{"function_hash":"258490044447819165761890927399281273261","length":1583},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/f83a53408ee5055c4e0b2a0dc7692811b78be7c9","target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java","function":"handleBondStateChanged"},"signature_version":"v1"},{"id":"ASB-A-290364858-c8c3956b","signature_type":"Line","digest":{"line_hashes":["305864466510637534793017076661939241314","24721725675103257489470149858387334317","122429301842912345656125589581716678867","39637882632034451169684967801581127109","29202412039906249954192024093881753390","88356096102476975710748304975988160523","21057023394588027097121282481923918046","20251326410565350043523602827334968240"],"threshold":0.9},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/f83a53408ee5055c4e0b2a0dc7692811b78be7c9","target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java"},"signature_version":"v1"}],"severity":"High","spl":"2026-06-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-290364858.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-06-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"id":"ASB-A-290364858-039c766b","signature_type":"Line","digest":{"line_hashes":["336048980400195847245278063684361695640","130864846825537491100810612431605631637","211701681484863352366504953180418013750","214489612472956584036118295522973027834","53716967109777148551067975742120209826"],"threshold":0.9},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/a8d133dacaeadf95d888a3731a17a382ebe7da2c","target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java"},"signature_version":"v1"},{"id":"ASB-A-290364858-8718ff6a","signature_type":"Function","digest":{"function_hash":"228747539382196669146037636699502846090","length":1041},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/a8d133dacaeadf95d888a3731a17a382ebe7da2c","target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java","function":"handleBondStateChanged"},"signature_version":"v1"}],"spl":"2026-06-01","severity":"High","fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/a8d133dacaeadf95d888a3731a17a382ebe7da2c"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-290364858.json"}}],"schema_version":"1.7.5"}