{"id":"ASB-A-522373825","details":"In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-522373825","CVE-2026-59028"],"modified":"2026-11-02T16:56:19.609051419Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/packages/modules/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java","function":"resolveAidConflictLocked"},"deprecated":false,"digest":{"length":3566,"function_hash":"265928023664238408722650893218740478691"},"id":"ASB-A-522373825-1eafc145","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/a810afd69488a55248e17e1ef94c9dc9d9c11608"},{"source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/a810afd69488a55248e17e1ef94c9dc9d9c11608","target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java"},"deprecated":false,"digest":{"line_hashes":["306818195370565809325377590687793782952","274582545198659872994016440925987448491","62990015994409936974287230004420250731","91408781466968858845307733352226215089","97611472942514387544339195174586080472","135689961710789054162583161441643340575","38273128420282599557823661933830414111","56402293073574025692410360036437137182","306852349687099053977963613936631239563","287744229732938287108597001156320832790","315759275126819732316670767498268300326","224514692031900788763314193016795778833","262560585798237266602341068871246722111"],"threshold":0.9},"id":"ASB-A-522373825-7ab4f118","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/a810afd69488a55248e17e1ef94c9dc9d9c11608","target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java","function":"resolveAidConflictLocked"},"deprecated":false,"digest":{"function_hash":"51503526070660967392803370877024488461","length":2651},"id":"ASB-A-522373825-ab8f88e2","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Nfc/+/a810afd69488a55248e17e1ef94c9dc9d9c11608"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-522373825.json"}},{"package":{"name":"platform/packages/apps/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"id":"ASB-A-522373825-34b08d11","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/090c5c3bb70b4350cc495ffbed3aed54be2f4767","target":{"function":"resolveAidConflictLocked","file":"src/com/android/nfc/cardemulation/RegisteredAidCache.java"},"deprecated":false,"digest":{"length":2425,"function_hash":"158732649799380634307256924704112694204"}},{"id":"ASB-A-522373825-8c2dee0f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/090c5c3bb70b4350cc495ffbed3aed54be2f4767","target":{"function":"resolveAidConflictLocked","file":"src/com/android/nfc/cardemulation/RegisteredAidCache.java"},"deprecated":false,"digest":{"function_hash":"297951326009822698519460294502520530822","length":2570}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/090c5c3bb70b4350cc495ffbed3aed54be2f4767","target":{"file":"src/com/android/nfc/cardemulation/RegisteredAidCache.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["150971658409956539972988160756512166704","261828516749889997301603641465396620360","71372986022485986898190461602793759398","91408781466968858845307733352226215089","97611472942514387544339195174586080472","113172363721416971795201575162516106853","288439348378415454978016270404534407163","38273128420282599557823661933830414111","246799484598677769987456967882418985772","49924606287640992802817283926128671581","177584893863937796778049700843312674647","53156013376983319427733069093502617797","65272975156520916600768357955978497764"]},"id":"ASB-A-522373825-8d358053","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/090c5c3bb70b4350cc495ffbed3aed54be2f4767"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-522373825.json"}},{"package":{"name":"platform/packages/modules/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-522373825-b4d777a0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/0ab1d66e54edc7fdd64c2236578a8839793b1408","target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java","function":"resolveAidConflictLocked"},"deprecated":false,"digest":{"length":2644,"function_hash":"62420813378767436160727005269590283101"}},{"digest":{"length":3507,"function_hash":"207330028648753242523987987365816363547"},"id":"ASB-A-522373825-b503604f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/0ab1d66e54edc7fdd64c2236578a8839793b1408","target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java","function":"resolveAidConflictLocked"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/0ab1d66e54edc7fdd64c2236578a8839793b1408","target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java"},"deprecated":false,"digest":{"line_hashes":["306818195370565809325377590687793782952","274582545198659872994016440925987448491","62990015994409936974287230004420250731","91408781466968858845307733352226215089","97611472942514387544339195174586080472","135689961710789054162583161441643340575","38273128420282599557823661933830414111","269587506768809283590619312510475097010","217800789033221475240799590571686882908","83479519267321003115826213305194270360","290344604867298189197057658963653495059","224514692031900788763314193016795778833","262560585798237266602341068871246722111"],"threshold":0.9},"id":"ASB-A-522373825-bd4da341"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Nfc/+/0ab1d66e54edc7fdd64c2236578a8839793b1408"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-522373825.json"}},{"package":{"name":"platform/packages/modules/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/7e11b6d4081a973737aedca82ac46c6d55a8ef7c","target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java","function":"resolveAidConflictLocked"},"deprecated":false,"digest":{"length":3619,"function_hash":"275175868987105713552315984552205134603"},"id":"ASB-A-522373825-34ecc396","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/7e11b6d4081a973737aedca82ac46c6d55a8ef7c","target":{"function":"resolveAidConflictLocked","file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java"},"deprecated":false,"digest":{"function_hash":"51503526070660967392803370877024488461","length":2651},"id":"ASB-A-522373825-4fba43d2","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/7e11b6d4081a973737aedca82ac46c6d55a8ef7c","target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java"},"deprecated":false,"digest":{"line_hashes":["306818195370565809325377590687793782952","274582545198659872994016440925987448491","62990015994409936974287230004420250731","91408781466968858845307733352226215089","97611472942514387544339195174586080472","135689961710789054162583161441643340575","38273128420282599557823661933830414111","56402293073574025692410360036437137182","306852349687099053977963613936631239563","287744229732938287108597001156320832790","315759275126819732316670767498268300326","224514692031900788763314193016795778833","262560585798237266602341068871246722111"],"threshold":0.9},"id":"ASB-A-522373825-bd007076","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Nfc/+/7e11b6d4081a973737aedca82ac46c6d55a8ef7c"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-522373825.json"}},{"package":{"name":"platform/packages/modules/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"line_hashes":["306818195370565809325377590687793782952","274582545198659872994016440925987448491","62990015994409936974287230004420250731","91408781466968858845307733352226215089","97611472942514387544339195174586080472","135689961710789054162583161441643340575","38273128420282599557823661933830414111","56402293073574025692410360036437137182","306852349687099053977963613936631239563","287744229732938287108597001156320832790","315759275126819732316670767498268300326","224514692031900788763314193016795778833","262560585798237266602341068871246722111"],"threshold":0.9},"id":"ASB-A-522373825-06bcaab2","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/5727f605d44162b09f0e2fe92e273818637146cc","target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java"},"deprecated":false},{"target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java","function":"resolveAidConflictLocked"},"deprecated":false,"digest":{"function_hash":"265928023664238408722650893218740478691","length":3566},"id":"ASB-A-522373825-c294b291","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/5727f605d44162b09f0e2fe92e273818637146cc"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/5727f605d44162b09f0e2fe92e273818637146cc","target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java","function":"resolveAidConflictLocked"},"deprecated":false,"digest":{"function_hash":"51503526070660967392803370877024488461","length":2651},"id":"ASB-A-522373825-c6484b1f"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Nfc/+/5727f605d44162b09f0e2fe92e273818637146cc"],"severity":"High","spl":"2026-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-522373825.json"}}],"schema_version":"1.9.2"}