{"id":"ASB-A-385917501","details":"In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-385917501","CVE-2026-0099"],"modified":"2026-09-22T15:22:15.314525410Z","published":"2026-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Nfc/+/127162a9e7645b4ac8bfc5ece80e0dabb9ddf61f"}],"affected":[{"package":{"name":"platform/packages/modules/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-06-01"}]}],"versions":["17-next"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":true,"digest":{"line_hashes":["224768083718427315416357503336807362862","37724214264644538098798405521993550560","324092725361412061698026165962187219276","289818009631056797221120871844993617323","338224876283745779021723195463464762686","317299657746041441650624568340216412263","253910612944174136291769229277328321324","331020601010040262644123326129411916786"],"threshold":0.9},"id":"ASB-A-385917501-71997677","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/cfbd02ac1630e339535cea673c3c4fa155fa668e","target":{"file":"NfcNci/src/com/android/nfc/cardemulation/HostEmulationManager.java"}}],"fixes":["https://android.googlesource.com/platform/packages/modules/Nfc/+/cfbd02ac1630e339535cea673c3c4fa155fa668e"],"severity":"High","spl":"2026-06-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-385917501.json"}},{"package":{"name":"platform/packages/apps/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-06-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/21e3d5ef1fe63f3b281f5123bb96d1eb0e603228"],"severity":"High","spl":"2026-06-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/21e3d5ef1fe63f3b281f5123bb96d1eb0e603228","target":{"file":"src/com/android/nfc/cardemulation/HostEmulationManager.java"},"deprecated":false,"digest":{"line_hashes":["299639071472544896953607923374874997871","69855456473488956266321583577122825812","47701298142462176068089655260617139813","267070785662328580448304901090929354680","12697726497696542673553345104182918430","237880029117311268914186694112129305003","1862275835714116268160799770185025747","263420407911450921941123036412588787985"],"threshold":0.9},"id":"ASB-A-385917501-d1550833"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-385917501.json"}},{"package":{"name":"platform/packages/modules/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-06-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Nfc/+/f6fc44fac696ab4ef6d148986443b9a47afc78a2"],"severity":"High","spl":"2026-06-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/f6fc44fac696ab4ef6d148986443b9a47afc78a2","target":{"file":"NfcNci/src/com/android/nfc/cardemulation/HostEmulationManager.java"},"deprecated":true,"digest":{"line_hashes":["224768083718427315416357503336807362862","37724214264644538098798405521993550560","324092725361412061698026165962187219276","289818009631056797221120871844993617323","338224876283745779021723195463464762686","317299657746041441650624568340216412263","253910612944174136291769229277328321324","331020601010040262644123326129411916786"],"threshold":0.9},"id":"ASB-A-385917501-1b0c2b36","signature_type":"Line","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-385917501.json"}},{"package":{"name":"platform/packages/modules/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-06-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/2d4b7ed433917f2146cbb1043b739eb8f96c0f09","target":{"file":"NfcNci/src/com/android/nfc/cardemulation/HostEmulationManager.java"},"deprecated":true,"digest":{"line_hashes":["224768083718427315416357503336807362862","37724214264644538098798405521993550560","324092725361412061698026165962187219276","289818009631056797221120871844993617323","338224876283745779021723195463464762686","317299657746041441650624568340216412263","253910612944174136291769229277328321324","331020601010040262644123326129411916786"],"threshold":0.9},"id":"ASB-A-385917501-bbdc14ba","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Nfc/+/2d4b7ed433917f2146cbb1043b739eb8f96c0f09"],"severity":"High","spl":"2026-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-385917501.json"}},{"package":{"name":"platform/packages/apps/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-06-01"}]}],"versions":["14"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"id":"ASB-A-385917501-5f7caa1a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/2e5fa5ea2cd3a8cad10616ce33c37f087486fe5f","target":{"file":"src/com/android/nfc/cardemulation/HostEmulationManager.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["308616650717532698995966931665632827974","327380655072348916182413943021892437831","47701298142462176068089655260617139813","267070785662328580448304901090929354680","122972695254232856134433309535047921106","77998004907547833864226951402732841299","1862275835714116268160799770185025747","263420407911450921941123036412588787985"]}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/2e5fa5ea2cd3a8cad10616ce33c37f087486fe5f"],"severity":"High","spl":"2026-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-385917501.json"}}],"schema_version":"1.9.0"}