{"id":"CVE-2026-0017","details":"In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-444673089","ASB-A-444673089"],"modified":"2026-11-07T10:47:27.771891552Z","published":"2026-03-02T19:16:30.133Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"16.0-NA"},{"last_affected":"16.0-NA"},{"introduced":"16.0-qpr2"},{"last_affected":"16.0-qpr2"}]}],"vendor_product":"google:android","cpes":["cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*","cpe:2.3:o:google:android:16.0:qpr2:*:*:*:*:*:*"]}]},"references":[{"type":"ADVISORY","url":"http://seclists.org/fulldisclosure/2026/Sep/93"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2026/09/29/8"},{"type":"ADVISORY","url":"https://source.android.com/docs/security/bulletin/2026/2026-03-01"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/libgme/game-music-emu","events":[{"introduced":"3c6adec6709439a4c8896c73c76cb12d9ff632f4"},{"last_affected":"9e23d10f9fd2a6a2f33b10912dd8dc7153258995"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"0.6.0"},{"last_affected":"0.6.0"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:libgme:game_music_emu:0.6.0:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:libgme:game_music_emu:0.6.5:*:*:*:*:*:*:*","range":[{"introduced":"0.6.5"},{"last_affected":"0.6.5"}],"source":"CPE_STRING"}]}}],"versions":["0.6.0","0.6.5"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-0017.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"}]}