{"id":"ASB-A-489079986", "published":"2026-09-01T00:00:00Z", "modified":"2026-09-11T15:42:03.104094163Z", "aliases":["CVE-2026-24090", "4384595", "A-489079986"], "affected":[{"package":{"name":"abl/tianocore/edk2", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"SoCVersion:0"}, {"fixed":"SoCVersion:2026-09-05"}]}], "versions":["SoCVersion"], "ecosystem_specific":{"fixes":["https://git.codelinaro.org/clo/la/abl/tianocore/edk2/-/commit/07665c08352d0051a627d5b42ae0ad1487f29afc"], "severity":"High", "spl":"2026-09-05", "types":["Unknown"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["202959761520843194356342704267754103406", "265346487714480968081908832473662438785", "76725227331487879099443986503707515156", "290342548666132625865652454067218760806", "185160607136227774667414588328337120373", "21295698657907167587453793898477246414", "32797903424486419940788380432423585863", "183166039722911530682182250156907933936", "31115536186627233616771690847144876439", "240413865829532489391155938568203629586", "213655657075347439401226761039238842812", "193133563198052159574122712153084463156", "44848998503826654267781382805448548210", "33780883835787222998059849466651529272", "162953590845124543101723425378632134064", "102773042227712380051185624212894701760", "193945555105656936453847297800470789796", "232011481164772284210136432358360125097", "109503403497554543326050015762786100672"], "threshold":0.9}, "id":"ASB-A-489079986-37965d5d", "signature_type":"Line", "signature_version":"v1", "source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/07665c08352d0051a627d5b42ae0ad1487f29afc", "target":{"file":"QcomModulePkg/Library/avb/VerifiedBoot.c"}}, {"deprecated":false, "digest":{"function_hash":"167905901553693524897096638724821449969", "length":333}, "id":"ASB-A-489079986-f27c0709", "signature_type":"Function", "signature_version":"v1", "source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/07665c08352d0051a627d5b42ae0ad1487f29afc", "target":{"file":"QcomModulePkg/Library/avb/VerifiedBoot.c", "function":"Is_VERIFIED_BOOT_2"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-09-01"}, {"type":"FIX", "url":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/-/commit/07665c08352d0051a627d5b42ae0ad1487f29afc"}]}