{"id":"ASB-A-519884370","details":"In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-519884370","CVE-2026-59002"],"modified":"2026-11-02T16:56:14.232006867Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f257fe7809282fa3c34e31851df99ad9f2f803ab","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java","function":"handleMessage"},"deprecated":false,"digest":{"function_hash":"18237245118701700326200780875349528246","length":3102},"id":"ASB-A-519884370-17c82d2d","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f257fe7809282fa3c34e31851df99ad9f2f803ab","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":false,"digest":{"line_hashes":["185997006276593719974238053503278319575","93906479424819124857740885275296440180","259454809899761942225616410753409181268","153345524672967060248689445871995406367","291374424344446462852108375233167684634","140221536153661281371407326755103500234","208979599059720471021125682829406010814","195803785267529664721182660969326938275","163084432054370082767565117614665984723","335831948167273581854191276434470828077","298577085831459822992571937442984016915"],"threshold":0.9},"id":"ASB-A-519884370-8182f700"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f257fe7809282fa3c34e31851df99ad9f2f803ab"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-519884370.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ee0f41705ee6a4006f62c30e0538cdd6ee38b3a4","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":false,"digest":{"line_hashes":["185997006276593719974238053503278319575","93906479424819124857740885275296440180","259454809899761942225616410753409181268","153345524672967060248689445871995406367","291374424344446462852108375233167684634","140221536153661281371407326755103500234","208979599059720471021125682829406010814","195803785267529664721182660969326938275","163084432054370082767565117614665984723","335831948167273581854191276434470828077","298577085831459822992571937442984016915"],"threshold":0.9},"id":"ASB-A-519884370-212d9cbd"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ee0f41705ee6a4006f62c30e0538cdd6ee38b3a4","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java","function":"handleMessage"},"deprecated":false,"digest":{"function_hash":"195840142014621201303541102181351292658","length":2898},"id":"ASB-A-519884370-8519ee08","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ee0f41705ee6a4006f62c30e0538cdd6ee38b3a4"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-519884370.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/889c5494dfe0be59755beeb687ad7c84df92d038","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":false,"digest":{"line_hashes":["185997006276593719974238053503278319575","93906479424819124857740885275296440180","259454809899761942225616410753409181268","153345524672967060248689445871995406367","291374424344446462852108375233167684634","140221536153661281371407326755103500234","208979599059720471021125682829406010814","195803785267529664721182660969326938275","163084432054370082767565117614665984723","335831948167273581854191276434470828077","298577085831459822992571937442984016915"],"threshold":0.9},"id":"ASB-A-519884370-50469fa6","signature_type":"Line"},{"id":"ASB-A-519884370-72e1be17","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/889c5494dfe0be59755beeb687ad7c84df92d038","target":{"function":"handleMessage","file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":false,"digest":{"function_hash":"195840142014621201303541102181351292658","length":2898}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/889c5494dfe0be59755beeb687ad7c84df92d038"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-519884370.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5432b804c313db814cfaac328bc3047d625c69c5"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/5432b804c313db814cfaac328bc3047d625c69c5","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":false,"digest":{"line_hashes":["185997006276593719974238053503278319575","93906479424819124857740885275296440180","259454809899761942225616410753409181268","153345524672967060248689445871995406367","291374424344446462852108375233167684634","140221536153661281371407326755103500234","208979599059720471021125682829406010814","195803785267529664721182660969326938275","163084432054370082767565117614665984723","335831948167273581854191276434470828077","298577085831459822992571937442984016915"],"threshold":0.9},"id":"ASB-A-519884370-03befc44","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-519884370-14259ee7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5432b804c313db814cfaac328bc3047d625c69c5","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java","function":"handleMessage"},"deprecated":false,"digest":{"function_hash":"195840142014621201303541102181351292658","length":2898}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-519884370.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"length":3102,"function_hash":"18237245118701700326200780875349528246"},"id":"ASB-A-519884370-be31a26e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/25ff242509e57e58376b3b94561fe7e57a0567f8","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java","function":"handleMessage"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/25ff242509e57e58376b3b94561fe7e57a0567f8","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":false,"digest":{"line_hashes":["185997006276593719974238053503278319575","93906479424819124857740885275296440180","259454809899761942225616410753409181268","153345524672967060248689445871995406367","291374424344446462852108375233167684634","140221536153661281371407326755103500234","208979599059720471021125682829406010814","195803785267529664721182660969326938275","163084432054370082767565117614665984723","335831948167273581854191276434470828077","298577085831459822992571937442984016915"],"threshold":0.9},"id":"ASB-A-519884370-cb844871","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/25ff242509e57e58376b3b94561fe7e57a0567f8"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-519884370.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["185997006276593719974238053503278319575","93906479424819124857740885275296440180","259454809899761942225616410753409181268","153345524672967060248689445871995406367","291374424344446462852108375233167684634","140221536153661281371407326755103500234","208979599059720471021125682829406010814","195803785267529664721182660969326938275","163084432054370082767565117614665984723","335831948167273581854191276434470828077","298577085831459822992571937442984016915"]},"id":"ASB-A-519884370-709c0b2f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2db753371d1cf8c093ee4ab80f0b6682f724a400","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}},{"id":"ASB-A-519884370-8f6c7287","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2db753371d1cf8c093ee4ab80f0b6682f724a400","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java","function":"handleMessage"},"deprecated":false,"digest":{"function_hash":"195840142014621201303541102181351292658","length":2898}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2db753371d1cf8c093ee4ab80f0b6682f724a400"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-519884370.json"}}],"schema_version":"1.9.2"}