{"id":"ASB-A-489079986","aliases":["4384595","A-489079986","CVE-2026-24090"],"modified":"2026-09-11T15:42:03.104094163Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"},{"type":"FIX","url":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/-/commit/07665c08352d0051a627d5b42ae0ad1487f29afc"}],"affected":[{"package":{"name":"abl/tianocore/edk2","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2026-09-05"}]}],"versions":["SoCVersion"],"ecosystem_specific":{"fixes":["https://git.codelinaro.org/clo/la/abl/tianocore/edk2/-/commit/07665c08352d0051a627d5b42ae0ad1487f29afc"],"severity":"High","spl":"2026-09-05","types":["Unknown"],"vanir_signatures":[{"source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/07665c08352d0051a627d5b42ae0ad1487f29afc","target":{"file":"QcomModulePkg/Library/avb/VerifiedBoot.c"},"deprecated":false,"digest":{"line_hashes":["202959761520843194356342704267754103406","265346487714480968081908832473662438785","76725227331487879099443986503707515156","290342548666132625865652454067218760806","185160607136227774667414588328337120373","21295698657907167587453793898477246414","32797903424486419940788380432423585863","183166039722911530682182250156907933936","31115536186627233616771690847144876439","240413865829532489391155938568203629586","213655657075347439401226761039238842812","193133563198052159574122712153084463156","44848998503826654267781382805448548210","33780883835787222998059849466651529272","162953590845124543101723425378632134064","102773042227712380051185624212894701760","193945555105656936453847297800470789796","232011481164772284210136432358360125097","109503403497554543326050015762786100672"],"threshold":0.9},"id":"ASB-A-489079986-37965d5d","signature_type":"Line","signature_version":"v1"},{"digest":{"function_hash":"167905901553693524897096638724821449969","length":333},"id":"ASB-A-489079986-f27c0709","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/07665c08352d0051a627d5b42ae0ad1487f29afc","target":{"file":"QcomModulePkg/Library/avb/VerifiedBoot.c","function":"Is_VERIFIED_BOOT_2"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-489079986.json"}}],"schema_version":"1.9.0"}