{"id":"ASB-A-290364858", "published":"2026-06-01T00:00:00Z", "modified":"2026-06-03T15:06:08.149995907Z", "aliases":["CVE-2026-0050", "A-290364858"], "details":"In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/modules/Bluetooth", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-06-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/921aaec06df0b5974d0fbbb40443935b15019270", "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/afca6806043387957c3730c7465f75b1ec407f63"], "severity":"High", "spl":"2026-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["305864466510637534793017076661939241314", "24721725675103257489470149858387334317", "122429301842912345656125589581716678867", "39637882632034451169684967801581127109", "29202412039906249954192024093881753390", "88356096102476975710748304975988160523", "21057023394588027097121282481923918046", "20251326410565350043523602827334968240"], "threshold":0.9}, "id":"ASB-A-290364858-162f9859", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/921aaec06df0b5974d0fbbb40443935b15019270", "target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java"}}, {"deprecated":false, "digest":{"line_hashes":["104864745248922639475810203119796420289", "57191062265804137688065769567100330434", "139015719142191469842233776694246710775", "214489612472956584036118295522973027834", "53716967109777148551067975742120209826"], "threshold":0.9}, "id":"ASB-A-290364858-c5daea1d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/afca6806043387957c3730c7465f75b1ec407f63", "target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java"}}, {"deprecated":false, "digest":{"function_hash":"265628521590673445795170880413659405486", "length":1144}, "id":"ASB-A-290364858-cec919c0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/afca6806043387957c3730c7465f75b1ec407f63", "target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java", "function":"handleBondStateChanged"}}, {"deprecated":false, "digest":{"function_hash":"258490044447819165761890927399281273261", "length":1583}, "id":"ASB-A-290364858-d7dfed47", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/921aaec06df0b5974d0fbbb40443935b15019270", "target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java", "function":"handleBondStateChanged"}}]}}, {"package":{"name":"platform/packages/modules/Bluetooth", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-06-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9c2be9f0da10486e20658fcb68ee2669ffdfe9f4"], "severity":"High", "spl":"2026-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"158872981596593419989496199545895507206", "length":1583}, "id":"ASB-A-290364858-c02e8fb6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9c2be9f0da10486e20658fcb68ee2669ffdfe9f4", "target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java", "function":"handleBondStateChanged"}}, {"deprecated":false, "digest":{"line_hashes":["14463957989382354865736227327803955519", "170130348391427609667341272047701606877", "29202412039906249954192024093881753390", "88356096102476975710748304975988160523", "21057023394588027097121282481923918046", "20251326410565350043523602827334968240"], "threshold":0.9}, "id":"ASB-A-290364858-de21e132", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9c2be9f0da10486e20658fcb68ee2669ffdfe9f4", "target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java"}}]}}, {"package":{"name":"platform/packages/modules/Bluetooth", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-06-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/f83a53408ee5055c4e0b2a0dc7692811b78be7c9"], "severity":"High", "spl":"2026-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"258490044447819165761890927399281273261", "length":1583}, "id":"ASB-A-290364858-3eabcbc6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/f83a53408ee5055c4e0b2a0dc7692811b78be7c9", "target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java", "function":"handleBondStateChanged"}}, {"deprecated":false, "digest":{"line_hashes":["305864466510637534793017076661939241314", "24721725675103257489470149858387334317", "122429301842912345656125589581716678867", "39637882632034451169684967801581127109", "29202412039906249954192024093881753390", "88356096102476975710748304975988160523", "21057023394588027097121282481923918046", "20251326410565350043523602827334968240"], "threshold":0.9}, "id":"ASB-A-290364858-c8c3956b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/f83a53408ee5055c4e0b2a0dc7692811b78be7c9", "target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java"}}]}}, {"package":{"name":"platform/packages/modules/Bluetooth", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-06-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/a8d133dacaeadf95d888a3731a17a382ebe7da2c"], "severity":"High", "spl":"2026-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["336048980400195847245278063684361695640", "130864846825537491100810612431605631637", "211701681484863352366504953180418013750", "214489612472956584036118295522973027834", "53716967109777148551067975742120209826"], "threshold":0.9}, "id":"ASB-A-290364858-039c766b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/a8d133dacaeadf95d888a3731a17a382ebe7da2c", "target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java"}}, {"deprecated":false, "digest":{"function_hash":"228747539382196669146037636699502846090", "length":1041}, "id":"ASB-A-290364858-8718ff6a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/a8d133dacaeadf95d888a3731a17a382ebe7da2c", "target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java", "function":"handleBondStateChanged"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-06-01"}]}