{"id":"ASB-A-499053500","details":"In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-499053500","CVE-2026-28604"],"modified":"2026-09-09T15:15:54.249544283Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"}],"affected":[{"package":{"name":"platform/packages/modules/adb","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"spl":"2026-09-01","types":["RCE"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/ca8689b1047a05598bb42ff034652ea679dd6056","target":{"file":"daemon/auth.cpp","function":"transport_to_callback_arg"},"deprecated":false,"digest":{"function_hash":"251411050143078781362800207094884710659","length":167},"id":"ASB-A-499053500-1d986aac","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4","target":{"file":"transport.cpp","function":"FdConnection::DoTlsHandshake"},"deprecated":false,"digest":{"length":1172,"function_hash":"68259553085829812739884907925193268974"},"id":"ASB-A-499053500-2c400d7a"},{"source":"https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4","target":{"file":"daemon/auth.cpp","function":"adbd_auth_tls_handshake"},"deprecated":false,"digest":{"length":540,"function_hash":"318611600218177984909965886271804270"},"id":"ASB-A-499053500-2c622bc1","signature_type":"Function","signature_version":"v1"},{"target":{"file":"daemon/auth.cpp"},"deprecated":false,"digest":{"line_hashes":["44246072668983439390148067533045825594","203184013069180869564976488290508197808","73776561674086332947366643024603928307","99787801989753570256444708657401519946","83995509246094547516431914283863239455","75072465448569609560983573560866268344","186928880968064794717981309552166894396","327178514315819310280409402158491487554","292252948304809608849331532854240803704","169858670430324741381451811478761611432","187066739170006868060777853589738041664","82651502943505659256971805190028302469","55902198275941690946834699611198111625","328438895880050661238090073356828234676","181898245955836418949660775772609290728","102201019438691637361781676995886952989"],"threshold":0.9},"id":"ASB-A-499053500-6008e989","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/ca8689b1047a05598bb42ff034652ea679dd6056","target":{"file":"daemon/auth.cpp","function":"transport_from_callback_arg"},"deprecated":false,"digest":{"function_hash":"303101992209649254389087675811945417231","length":689},"id":"ASB-A-499053500-933655a8","signature_type":"Function"},{"digest":{"line_hashes":["130202974046295831299834828345285650137","145683867620274724546197799061147682996","215688098617886272595131726506518536036","240078615845113364850537430465646078076","114568918938926965140285264357991440282","148562374208343567048870333502665971629","16320796658391830246472807516624699433","104876950020145966225700100152853406076","315592243438525867557118439768432180908","260836043150547143252473972057727797980","79416915775016457062389067088243507416","274748577855150536855196877294408582858","305137080477948318915756571928439418026","253190489779438930077609599635231739549","59930784335072035719153930868282449708","61899759422485238004047138696200606133","279199429697540242727410377611818299054","45774275508297467061854161727246750769","7280772281204450275999964719932611785","174949165858618807215963820804655827922","209064422562243965672467727307025243744","146951163939315252188604184445925761926","140384589355253479551704649993712733647","205153879203671968104626124802246577596","190649343455864397196154716729654564567","316172997185122699691985679964219091358","305177318141357131387027034715507218081","16393282775375716288707932706755601996","147400792149685589321416671485840524632"],"threshold":0.9},"id":"ASB-A-499053500-aea6b719","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/ca8689b1047a05598bb42ff034652ea679dd6056","target":{"file":"daemon/auth.cpp"},"deprecated":false},{"target":{"file":"transport.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["201347976594503706699311040440373831505","260874959964496991256816960723486837277","68528373089758590918458031942994462164","263143789194790534324974297836326807763","182261942998819080205463738981143913032","290533609952657922146991081198288338491","44878213353551284943375713548259719012","160743937665247659027923765464865966856","2520742642356756046183170178349274208","201099032936359238136866224047286752802","68060143319095481271821421793850309384","5574246830088354259307902012511919870","213317150644517721561367439635501440621","181647197572689677527573054911196225782","275052822347904194176585551385371514324","141414126420664879158211458890215833697","299499256615448603658019264344052132698","282433197904708193423740841891628063619","293180300263506760550338827997472878318","181021066879632656436848764839402829867","49088385692449318969729688178656988624","37463245829269288819031518132226923850","88005044251085738311195700478467671862","284607427949559937594459208626394373589","79163444189722673396353217125001346885","11925882930557433861975727949482165210","131410400069573400899665492574082094645"]},"id":"ASB-A-499053500-dec65120","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4"}],"fixes":["https://android.googlesource.com/platform/packages/modules/adb/+/ca8689b1047a05598bb42ff034652ea679dd6056","https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4"],"severity":"Critical"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-499053500.json"}},{"package":{"name":"platform/packages/modules/adb","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-09-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"target":{"function":"transport_from_callback_arg","file":"daemon/auth.cpp"},"deprecated":false,"digest":{"function_hash":"85935860183145777132797809884017660843","length":692},"id":"ASB-A-499053500-1ec6f51b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/306ab4cbcb4e4dcc617cdc8bc6b9c8cad7fb3b28"},{"deprecated":false,"digest":{"line_hashes":["201347976594503706699311040440373831505","260874959964496991256816960723486837277","68528373089758590918458031942994462164","263143789194790534324974297836326807763","182261942998819080205463738981143913032","290533609952657922146991081198288338491","44878213353551284943375713548259719012","160743937665247659027923765464865966856","2520742642356756046183170178349274208","201099032936359238136866224047286752802","68060143319095481271821421793850309384","5574246830088354259307902012511919870","213317150644517721561367439635501440621","181647197572689677527573054911196225782","275052822347904194176585551385371514324","141414126420664879158211458890215833697","299499256615448603658019264344052132698","282433197904708193423740841891628063619","293180300263506760550338827997472878318","181021066879632656436848764839402829867","49088385692449318969729688178656988624","37463245829269288819031518132226923850","88005044251085738311195700478467671862","284607427949559937594459208626394373589","79163444189722673396353217125001346885","11925882930557433861975727949482165210","131410400069573400899665492574082094645"],"threshold":0.9},"id":"ASB-A-499053500-25ae40f5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5","target":{"file":"transport.cpp"}},{"source":"https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5","target":{"file":"transport.cpp","function":"FdConnection::DoTlsHandshake"},"deprecated":false,"digest":{"function_hash":"68259553085829812739884907925193268974","length":1172},"id":"ASB-A-499053500-45f1eb5a","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/306ab4cbcb4e4dcc617cdc8bc6b9c8cad7fb3b28","target":{"function":"transport_to_callback_arg","file":"daemon/auth.cpp"},"deprecated":false,"digest":{"function_hash":"133808897306689608483968929535118343161","length":173},"id":"ASB-A-499053500-49f87ada","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5","target":{"file":"daemon/auth.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["44246072668983439390148067533045825594","203184013069180869564976488290508197808","73776561674086332947366643024603928307","184857570419323916123490812049974724612","290664200632557086196763467274379677126","208919262436688842009814335991146917233","169015762045903549219684152073238021201","327178514315819310280409402158491487554","292252948304809608849331532854240803704","169858670430324741381451811478761611432","187066739170006868060777853589738041664","82651502943505659256971805190028302469","55902198275941690946834699611198111625","328438895880050661238090073356828234676","181898245955836418949660775772609290728","102201019438691637361781676995886952989"]},"id":"ASB-A-499053500-7b8a84b7","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["173010739123097531698422802604818074965","169907421080577288046512616546451649334","242404074545630772428486324107250096290","235136211121210597119348234449832974424","114568918938926965140285264357991440282","148562374208343567048870333502665971629","180747833584260176571626941026277047507","144137230564792780644792149799228877342","91066934623729648335345421246102721187","279084401777254444616660845934857851487","79416915775016457062389067088243507416","274748577855150536855196877294408582858","305137080477948318915756571928439418026","253190489779438930077609599635231739549","59930784335072035719153930868282449708","4802944779634811330769744236131475220","6439038411777416290037256764578651439","288964617236352188856265710168258280597","56910755955193388828915161095086884337","171092454944421598675340368580904739427","209064422562243965672467727307025243744","146951163939315252188604184445925761926","140384589355253479551704649993712733647","205153879203671968104626124802246577596","190649343455864397196154716729654564567","316958103376571296710332603775344713259","264507402409785977953938045986812816701","198378422093956137436608922772874447265","11468761926324111724005659517500638589"]},"id":"ASB-A-499053500-ea9210c9","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/306ab4cbcb4e4dcc617cdc8bc6b9c8cad7fb3b28","target":{"file":"daemon/auth.cpp"}},{"deprecated":false,"digest":{"length":540,"function_hash":"203990001823878910352410494377031318040"},"id":"ASB-A-499053500-f60e9b71","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5","target":{"function":"adbd_auth_tls_handshake","file":"daemon/auth.cpp"}}],"fixes":["https://android.googlesource.com/platform/packages/modules/adb/+/306ab4cbcb4e4dcc617cdc8bc6b9c8cad7fb3b28","https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5"],"severity":"Critical","spl":"2026-09-01","types":["RCE"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-499053500.json"}},{"package":{"name":"platform/packages/modules/adb","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-09-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"Critical","spl":"2026-09-01","types":["RCE"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/82897f1dd7435a64f01b815fc58e9f417835a63b","target":{"function":"transport_to_callback_arg","file":"daemon/auth.cpp"},"deprecated":false,"digest":{"function_hash":"133808897306689608483968929535118343161","length":173},"id":"ASB-A-499053500-110347fa","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["173010739123097531698422802604818074965","169907421080577288046512616546451649334","242404074545630772428486324107250096290","235136211121210597119348234449832974424","114568918938926965140285264357991440282","148562374208343567048870333502665971629","180747833584260176571626941026277047507","144137230564792780644792149799228877342","91066934623729648335345421246102721187","279084401777254444616660845934857851487","79416915775016457062389067088243507416","274748577855150536855196877294408582858","305137080477948318915756571928439418026","253190489779438930077609599635231739549","59930784335072035719153930868282449708","4802944779634811330769744236131475220","6439038411777416290037256764578651439","288964617236352188856265710168258280597","56910755955193388828915161095086884337","171092454944421598675340368580904739427","209064422562243965672467727307025243744","146951163939315252188604184445925761926","140384589355253479551704649993712733647","205153879203671968104626124802246577596","190649343455864397196154716729654564567","316958103376571296710332603775344713259","264507402409785977953938045986812816701","198378422093956137436608922772874447265","11468761926324111724005659517500638589"]},"id":"ASB-A-499053500-1e716e92","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/82897f1dd7435a64f01b815fc58e9f417835a63b","target":{"file":"daemon/auth.cpp"},"deprecated":false},{"digest":{"line_hashes":["201347976594503706699311040440373831505","260874959964496991256816960723486837277","68528373089758590918458031942994462164","263143789194790534324974297836326807763","182261942998819080205463738981143913032","290533609952657922146991081198288338491","44878213353551284943375713548259719012","160743937665247659027923765464865966856","2520742642356756046183170178349274208","201099032936359238136866224047286752802","68060143319095481271821421793850309384","5574246830088354259307902012511919870","213317150644517721561367439635501440621","181647197572689677527573054911196225782","275052822347904194176585551385371514324","141414126420664879158211458890215833697","299499256615448603658019264344052132698","282433197904708193423740841891628063619","293180300263506760550338827997472878318","181021066879632656436848764839402829867","49088385692449318969729688178656988624","37463245829269288819031518132226923850","88005044251085738311195700478467671862","284607427949559937594459208626394373589","79163444189722673396353217125001346885","11925882930557433861975727949482165210","131410400069573400899665492574082094645"],"threshold":0.9},"id":"ASB-A-499053500-7a70d0e3","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8","target":{"file":"transport.cpp"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8","target":{"file":"transport.cpp","function":"FdConnection::DoTlsHandshake"},"deprecated":false,"digest":{"length":1172,"function_hash":"68259553085829812739884907925193268974"},"id":"ASB-A-499053500-89f4edf4","signature_type":"Function"},{"id":"ASB-A-499053500-a73e3235","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8","target":{"file":"daemon/auth.cpp"},"deprecated":false,"digest":{"line_hashes":["44246072668983439390148067533045825594","203184013069180869564976488290508197808","73776561674086332947366643024603928307","99787801989753570256444708657401519946","83995509246094547516431914283863239455","75072465448569609560983573560866268344","186928880968064794717981309552166894396","327178514315819310280409402158491487554","292252948304809608849331532854240803704","169858670430324741381451811478761611432","187066739170006868060777853589738041664","82651502943505659256971805190028302469","55902198275941690946834699611198111625","328438895880050661238090073356828234676","181898245955836418949660775772609290728","102201019438691637361781676995886952989"],"threshold":0.9}},{"digest":{"length":540,"function_hash":"318611600218177984909965886271804270"},"id":"ASB-A-499053500-eb9de58b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8","target":{"file":"daemon/auth.cpp","function":"adbd_auth_tls_handshake"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/82897f1dd7435a64f01b815fc58e9f417835a63b","target":{"function":"transport_from_callback_arg","file":"daemon/auth.cpp"},"deprecated":false,"digest":{"length":692,"function_hash":"85935860183145777132797809884017660843"},"id":"ASB-A-499053500-ffbacdd8"}],"fixes":["https://android.googlesource.com/platform/packages/modules/adb/+/82897f1dd7435a64f01b815fc58e9f417835a63b","https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-499053500.json"}},{"package":{"name":"platform/packages/modules/adb","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-09-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/a5030c6e218a9d81cebdca4da77021ece883f782","target":{"file":"daemon/auth.cpp","function":"transport_to_callback_arg"},"deprecated":false,"digest":{"function_hash":"133808897306689608483968929535118343161","length":173},"id":"ASB-A-499053500-0f3a4040"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c","target":{"file":"transport.cpp"},"deprecated":false,"digest":{"line_hashes":["201347976594503706699311040440373831505","260874959964496991256816960723486837277","68528373089758590918458031942994462164","263143789194790534324974297836326807763","182261942998819080205463738981143913032","290533609952657922146991081198288338491","44878213353551284943375713548259719012","160743937665247659027923765464865966856","2520742642356756046183170178349274208","201099032936359238136866224047286752802","68060143319095481271821421793850309384","5574246830088354259307902012511919870","213317150644517721561367439635501440621","181647197572689677527573054911196225782","275052822347904194176585551385371514324","141414126420664879158211458890215833697","299499256615448603658019264344052132698","282433197904708193423740841891628063619","293180300263506760550338827997472878318","181021066879632656436848764839402829867","49088385692449318969729688178656988624","37463245829269288819031518132226923850","88005044251085738311195700478467671862","284607427949559937594459208626394373589","79163444189722673396353217125001346885","11925882930557433861975727949482165210","131410400069573400899665492574082094645"],"threshold":0.9},"id":"ASB-A-499053500-3032202e","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/packages/modules/adb/+/a5030c6e218a9d81cebdca4da77021ece883f782","target":{"file":"daemon/auth.cpp","function":"transport_from_callback_arg"},"deprecated":false,"digest":{"length":692,"function_hash":"85935860183145777132797809884017660843"},"id":"ASB-A-499053500-34b06a77","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c","target":{"file":"transport.cpp","function":"FdConnection::DoTlsHandshake"},"deprecated":false,"digest":{"function_hash":"68259553085829812739884907925193268974","length":1172},"id":"ASB-A-499053500-356f969c","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c","target":{"file":"daemon/auth.cpp","function":"adbd_auth_tls_handshake"},"deprecated":false,"digest":{"length":540,"function_hash":"318611600218177984909965886271804270"},"id":"ASB-A-499053500-3ccdbacc"},{"id":"ASB-A-499053500-3d8da35f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/a5030c6e218a9d81cebdca4da77021ece883f782","target":{"file":"daemon/auth.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["173010739123097531698422802604818074965","169907421080577288046512616546451649334","242404074545630772428486324107250096290","235136211121210597119348234449832974424","114568918938926965140285264357991440282","148562374208343567048870333502665971629","180747833584260176571626941026277047507","144137230564792780644792149799228877342","91066934623729648335345421246102721187","279084401777254444616660845934857851487","79416915775016457062389067088243507416","274748577855150536855196877294408582858","305137080477948318915756571928439418026","253190489779438930077609599635231739549","59930784335072035719153930868282449708","4802944779634811330769744236131475220","6439038411777416290037256764578651439","288964617236352188856265710168258280597","56910755955193388828915161095086884337","171092454944421598675340368580904739427","209064422562243965672467727307025243744","146951163939315252188604184445925761926","140384589355253479551704649993712733647","205153879203671968104626124802246577596","190649343455864397196154716729654564567","316958103376571296710332603775344713259","264507402409785977953938045986812816701","198378422093956137436608922772874447265","11468761926324111724005659517500638589"]}},{"target":{"file":"daemon/auth.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["44246072668983439390148067533045825594","203184013069180869564976488290508197808","73776561674086332947366643024603928307","99787801989753570256444708657401519946","83995509246094547516431914283863239455","75072465448569609560983573560866268344","186928880968064794717981309552166894396","327178514315819310280409402158491487554","292252948304809608849331532854240803704","169858670430324741381451811478761611432","187066739170006868060777853589738041664","82651502943505659256971805190028302469","55902198275941690946834699611198111625","328438895880050661238090073356828234676","181898245955836418949660775772609290728","102201019438691637361781676995886952989"]},"id":"ASB-A-499053500-54f3bea1","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c"}],"fixes":["https://android.googlesource.com/platform/packages/modules/adb/+/a5030c6e218a9d81cebdca4da77021ece883f782","https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c"],"severity":"Critical","spl":"2026-09-01","types":["RCE"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-499053500.json"}},{"package":{"name":"platform/packages/modules/adb","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-09-01"}]}],"versions":["17"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/adb/+/ea885606faf989081914b3aa699d42d0a46abb28","https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87"],"severity":"Critical","spl":"2026-09-01","types":["RCE"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/adb/+/ea885606faf989081914b3aa699d42d0a46abb28","target":{"file":"daemon/auth.cpp"},"deprecated":false,"digest":{"line_hashes":["173010739123097531698422802604818074965","169907421080577288046512616546451649334","242404074545630772428486324107250096290","235136211121210597119348234449832974424","114568918938926965140285264357991440282","148562374208343567048870333502665971629","180747833584260176571626941026277047507","144137230564792780644792149799228877342","91066934623729648335345421246102721187","279084401777254444616660845934857851487","79416915775016457062389067088243507416","274748577855150536855196877294408582858","305137080477948318915756571928439418026","253190489779438930077609599635231739549","59930784335072035719153930868282449708","4802944779634811330769744236131475220","6439038411777416290037256764578651439","288964617236352188856265710168258280597","56910755955193388828915161095086884337","171092454944421598675340368580904739427","209064422562243965672467727307025243744","146951163939315252188604184445925761926","140384589355253479551704649993712733647","205153879203671968104626124802246577596","190649343455864397196154716729654564567","316958103376571296710332603775344713259","264507402409785977953938045986812816701","198378422093956137436608922772874447265","11468761926324111724005659517500638589"],"threshold":0.9},"id":"ASB-A-499053500-06e8f7f4","signature_type":"Line","signature_version":"v1"},{"target":{"file":"daemon/auth.cpp"},"deprecated":false,"digest":{"line_hashes":["44246072668983439390148067533045825594","203184013069180869564976488290508197808","73776561674086332947366643024603928307","99787801989753570256444708657401519946","83995509246094547516431914283863239455","75072465448569609560983573560866268344","186928880968064794717981309552166894396","327178514315819310280409402158491487554","292252948304809608849331532854240803704","169858670430324741381451811478761611432","187066739170006868060777853589738041664","82651502943505659256971805190028302469","55902198275941690946834699611198111625","328438895880050661238090073356828234676","181898245955836418949660775772609290728","102201019438691637361781676995886952989"],"threshold":0.9},"id":"ASB-A-499053500-0b141983","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87"},{"digest":{"function_hash":"133808897306689608483968929535118343161","length":173},"id":"ASB-A-499053500-0cfac820","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/ea885606faf989081914b3aa699d42d0a46abb28","target":{"function":"transport_to_callback_arg","file":"daemon/auth.cpp"},"deprecated":false},{"id":"ASB-A-499053500-3924540e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87","target":{"file":"transport.cpp","function":"FdConnection::DoTlsHandshake"},"deprecated":false,"digest":{"function_hash":"68259553085829812739884907925193268974","length":1172}},{"deprecated":false,"digest":{"length":540,"function_hash":"318611600218177984909965886271804270"},"id":"ASB-A-499053500-4449f9ea","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87","target":{"file":"daemon/auth.cpp","function":"adbd_auth_tls_handshake"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87","target":{"file":"transport.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["201347976594503706699311040440373831505","260874959964496991256816960723486837277","68528373089758590918458031942994462164","263143789194790534324974297836326807763","182261942998819080205463738981143913032","290533609952657922146991081198288338491","44878213353551284943375713548259719012","160743937665247659027923765464865966856","2520742642356756046183170178349274208","201099032936359238136866224047286752802","68060143319095481271821421793850309384","5574246830088354259307902012511919870","213317150644517721561367439635501440621","181647197572689677527573054911196225782","275052822347904194176585551385371514324","141414126420664879158211458890215833697","299499256615448603658019264344052132698","282433197904708193423740841891628063619","293180300263506760550338827997472878318","181021066879632656436848764839402829867","49088385692449318969729688178656988624","37463245829269288819031518132226923850","88005044251085738311195700478467671862","284607427949559937594459208626394373589","79163444189722673396353217125001346885","11925882930557433861975727949482165210","131410400069573400899665492574082094645"]},"id":"ASB-A-499053500-c56cbd73","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/ea885606faf989081914b3aa699d42d0a46abb28","target":{"function":"transport_from_callback_arg","file":"daemon/auth.cpp"},"deprecated":false,"digest":{"function_hash":"85935860183145777132797809884017660843","length":692},"id":"ASB-A-499053500-e1bc7b1d"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-499053500.json"}},{"package":{"name":"platform/packages/modules/adb","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-09-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"Critical","spl":"2026-09-01","types":["RCE"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/bdc7a2c6f0390541d4f26e1dc4ba326adbffaaa0","target":{"function":"transport_from_callback_arg","file":"daemon/auth.cpp"},"deprecated":false,"digest":{"function_hash":"85935860183145777132797809884017660843","length":692},"id":"ASB-A-499053500-269ac13f","signature_type":"Function"},{"target":{"function":"transport_to_callback_arg","file":"daemon/auth.cpp"},"deprecated":false,"digest":{"function_hash":"133808897306689608483968929535118343161","length":173},"id":"ASB-A-499053500-37ae3633","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/bdc7a2c6f0390541d4f26e1dc4ba326adbffaaa0"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82","target":{"function":"FdConnection::DoTlsHandshake","file":"transport.cpp"},"deprecated":false,"digest":{"length":1172,"function_hash":"68259553085829812739884907925193268974"},"id":"ASB-A-499053500-41d6920d","signature_type":"Function"},{"id":"ASB-A-499053500-46c7d6c2","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82","target":{"file":"transport.cpp"},"deprecated":false,"digest":{"line_hashes":["201347976594503706699311040440373831505","260874959964496991256816960723486837277","68528373089758590918458031942994462164","263143789194790534324974297836326807763","182261942998819080205463738981143913032","290533609952657922146991081198288338491","44878213353551284943375713548259719012","160743937665247659027923765464865966856","2520742642356756046183170178349274208","201099032936359238136866224047286752802","68060143319095481271821421793850309384","5574246830088354259307902012511919870","213317150644517721561367439635501440621","181647197572689677527573054911196225782","275052822347904194176585551385371514324","141414126420664879158211458890215833697","299499256615448603658019264344052132698","282433197904708193423740841891628063619","293180300263506760550338827997472878318","181021066879632656436848764839402829867","49088385692449318969729688178656988624","37463245829269288819031518132226923850","88005044251085738311195700478467671862","284607427949559937594459208626394373589","79163444189722673396353217125001346885","11925882930557433861975727949482165210","131410400069573400899665492574082094645"],"threshold":0.9}},{"source":"https://android.googlesource.com/platform/packages/modules/adb/+/bdc7a2c6f0390541d4f26e1dc4ba326adbffaaa0","target":{"file":"daemon/auth.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["173010739123097531698422802604818074965","169907421080577288046512616546451649334","242404074545630772428486324107250096290","235136211121210597119348234449832974424","114568918938926965140285264357991440282","148562374208343567048870333502665971629","180747833584260176571626941026277047507","144137230564792780644792149799228877342","91066934623729648335345421246102721187","279084401777254444616660845934857851487","79416915775016457062389067088243507416","274748577855150536855196877294408582858","305137080477948318915756571928439418026","253190489779438930077609599635231739549","59930784335072035719153930868282449708","4802944779634811330769744236131475220","6439038411777416290037256764578651439","288964617236352188856265710168258280597","56910755955193388828915161095086884337","171092454944421598675340368580904739427","209064422562243965672467727307025243744","146951163939315252188604184445925761926","140384589355253479551704649993712733647","205153879203671968104626124802246577596","190649343455864397196154716729654564567","316958103376571296710332603775344713259","264507402409785977953938045986812816701","198378422093956137436608922772874447265","11468761926324111724005659517500638589"]},"id":"ASB-A-499053500-5c6976ea","signature_type":"Line","signature_version":"v1"},{"digest":{"length":540,"function_hash":"203990001823878910352410494377031318040"},"id":"ASB-A-499053500-782bd627","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82","target":{"file":"daemon/auth.cpp","function":"adbd_auth_tls_handshake"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82","target":{"file":"daemon/auth.cpp"},"deprecated":false,"digest":{"line_hashes":["44246072668983439390148067533045825594","203184013069180869564976488290508197808","73776561674086332947366643024603928307","184857570419323916123490812049974724612","290664200632557086196763467274379677126","208919262436688842009814335991146917233","169015762045903549219684152073238021201","327178514315819310280409402158491487554","292252948304809608849331532854240803704","169858670430324741381451811478761611432","187066739170006868060777853589738041664","82651502943505659256971805190028302469","55902198275941690946834699611198111625","328438895880050661238090073356828234676","181898245955836418949660775772609290728","102201019438691637361781676995886952989"],"threshold":0.9},"id":"ASB-A-499053500-7a30dd6b","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/modules/adb/+/bdc7a2c6f0390541d4f26e1dc4ba326adbffaaa0","https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-499053500.json"}}],"schema_version":"1.9.0"}