{"id":"ASB-A-385917501", "published":"2026-06-01T00:00:00Z", "modified":"2026-06-24T15:00:40.818157658Z", "aliases":["CVE-2026-0099", "A-385917501"], "details":"In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.", "affected":[{"package":{"name":"platform/packages/modules/Nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-06-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Nfc/+/cfbd02ac1630e339535cea673c3c4fa155fa668e"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["224768083718427315416357503336807362862", "37724214264644538098798405521993550560", "324092725361412061698026165962187219276", "289818009631056797221120871844993617323", "338224876283745779021723195463464762686", "317299657746041441650624568340216412263", "253910612944174136291769229277328321324", "331020601010040262644123326129411916786"], "threshold":0.9}, "id":"ASB-A-385917501-71997677", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/cfbd02ac1630e339535cea673c3c4fa155fa668e", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/HostEmulationManager.java"}}]}}, {"package":{"name":"platform/packages/apps/Nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-06-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/21e3d5ef1fe63f3b281f5123bb96d1eb0e603228"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["299639071472544896953607923374874997871", "69855456473488956266321583577122825812", "47701298142462176068089655260617139813", "267070785662328580448304901090929354680", "12697726497696542673553345104182918430", "237880029117311268914186694112129305003", "1862275835714116268160799770185025747", "263420407911450921941123036412588787985"], "threshold":0.9}, "id":"ASB-A-385917501-d1550833", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/21e3d5ef1fe63f3b281f5123bb96d1eb0e603228", "target":{"file":"src/com/android/nfc/cardemulation/HostEmulationManager.java"}}]}}, {"package":{"name":"platform/packages/modules/Nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-06-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Nfc/+/f6fc44fac696ab4ef6d148986443b9a47afc78a2"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["224768083718427315416357503336807362862", "37724214264644538098798405521993550560", "324092725361412061698026165962187219276", "289818009631056797221120871844993617323", "338224876283745779021723195463464762686", "317299657746041441650624568340216412263", "253910612944174136291769229277328321324", "331020601010040262644123326129411916786"], "threshold":0.9}, "id":"ASB-A-385917501-1b0c2b36", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/f6fc44fac696ab4ef6d148986443b9a47afc78a2", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/HostEmulationManager.java"}}]}}, {"package":{"name":"platform/packages/modules/Nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-06-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Nfc/+/2d4b7ed433917f2146cbb1043b739eb8f96c0f09"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["224768083718427315416357503336807362862", "37724214264644538098798405521993550560", "324092725361412061698026165962187219276", "289818009631056797221120871844993617323", "338224876283745779021723195463464762686", "317299657746041441650624568340216412263", "253910612944174136291769229277328321324", "331020601010040262644123326129411916786"], "threshold":0.9}, "id":"ASB-A-385917501-bbdc14ba", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/2d4b7ed433917f2146cbb1043b739eb8f96c0f09", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/HostEmulationManager.java"}}]}}, {"package":{"name":"platform/packages/apps/Nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-06-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/2e5fa5ea2cd3a8cad10616ce33c37f087486fe5f"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["308616650717532698995966931665632827974", "327380655072348916182413943021892437831", "47701298142462176068089655260617139813", "267070785662328580448304901090929354680", "122972695254232856134433309535047921106", "77998004907547833864226951402732841299", "1862275835714116268160799770185025747", "263420407911450921941123036412588787985"], "threshold":0.9}, "id":"ASB-A-385917501-5f7caa1a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/2e5fa5ea2cd3a8cad10616ce33c37f087486fe5f", "target":{"file":"src/com/android/nfc/cardemulation/HostEmulationManager.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-06-01"}]}