{"id":"ASB-A-499053500", "published":"2026-09-01T00:00:00Z", "modified":"2026-09-11T15:42:03.104094163Z", "aliases":["CVE-2026-28604", "A-499053500"], "details":"In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/modules/adb", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-09-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/adb/+/ca8689b1047a05598bb42ff034652ea679dd6056", "https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4"], "severity":"Critical", "spl":"2026-09-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"251411050143078781362800207094884710659", "length":167}, "id":"ASB-A-499053500-1d986aac", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/ca8689b1047a05598bb42ff034652ea679dd6056", "target":{"file":"daemon/auth.cpp", "function":"transport_to_callback_arg"}}, {"deprecated":false, "digest":{"function_hash":"68259553085829812739884907925193268974", "length":1172}, "id":"ASB-A-499053500-2c400d7a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4", "target":{"file":"transport.cpp", "function":"FdConnection::DoTlsHandshake"}}, {"deprecated":false, "digest":{"function_hash":"318611600218177984909965886271804270", "length":540}, "id":"ASB-A-499053500-2c622bc1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4", "target":{"file":"daemon/auth.cpp", "function":"adbd_auth_tls_handshake"}}, {"deprecated":false, "digest":{"line_hashes":["44246072668983439390148067533045825594", "203184013069180869564976488290508197808", "73776561674086332947366643024603928307", "99787801989753570256444708657401519946", "83995509246094547516431914283863239455", "75072465448569609560983573560866268344", "186928880968064794717981309552166894396", "327178514315819310280409402158491487554", "292252948304809608849331532854240803704", "169858670430324741381451811478761611432", "187066739170006868060777853589738041664", "82651502943505659256971805190028302469", "55902198275941690946834699611198111625", "328438895880050661238090073356828234676", "181898245955836418949660775772609290728", "102201019438691637361781676995886952989"], "threshold":0.9}, "id":"ASB-A-499053500-6008e989", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4", "target":{"file":"daemon/auth.cpp"}}, {"deprecated":false, "digest":{"function_hash":"303101992209649254389087675811945417231", "length":689}, "id":"ASB-A-499053500-933655a8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/ca8689b1047a05598bb42ff034652ea679dd6056", "target":{"file":"daemon/auth.cpp", "function":"transport_from_callback_arg"}}, {"deprecated":false, "digest":{"line_hashes":["130202974046295831299834828345285650137", "145683867620274724546197799061147682996", "215688098617886272595131726506518536036", "240078615845113364850537430465646078076", "114568918938926965140285264357991440282", "148562374208343567048870333502665971629", "16320796658391830246472807516624699433", "104876950020145966225700100152853406076", "315592243438525867557118439768432180908", "260836043150547143252473972057727797980", "79416915775016457062389067088243507416", "274748577855150536855196877294408582858", "305137080477948318915756571928439418026", "253190489779438930077609599635231739549", "59930784335072035719153930868282449708", "61899759422485238004047138696200606133", "279199429697540242727410377611818299054", "45774275508297467061854161727246750769", "7280772281204450275999964719932611785", "174949165858618807215963820804655827922", "209064422562243965672467727307025243744", "146951163939315252188604184445925761926", "140384589355253479551704649993712733647", "205153879203671968104626124802246577596", "190649343455864397196154716729654564567", "316172997185122699691985679964219091358", "305177318141357131387027034715507218081", "16393282775375716288707932706755601996", "147400792149685589321416671485840524632"], "threshold":0.9}, "id":"ASB-A-499053500-aea6b719", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/ca8689b1047a05598bb42ff034652ea679dd6056", "target":{"file":"daemon/auth.cpp"}}, {"deprecated":false, "digest":{"line_hashes":["201347976594503706699311040440373831505", "260874959964496991256816960723486837277", "68528373089758590918458031942994462164", "263143789194790534324974297836326807763", "182261942998819080205463738981143913032", "290533609952657922146991081198288338491", "44878213353551284943375713548259719012", "160743937665247659027923765464865966856", "2520742642356756046183170178349274208", "201099032936359238136866224047286752802", "68060143319095481271821421793850309384", "5574246830088354259307902012511919870", "213317150644517721561367439635501440621", "181647197572689677527573054911196225782", "275052822347904194176585551385371514324", "141414126420664879158211458890215833697", "299499256615448603658019264344052132698", "282433197904708193423740841891628063619", "293180300263506760550338827997472878318", "181021066879632656436848764839402829867", "49088385692449318969729688178656988624", "37463245829269288819031518132226923850", "88005044251085738311195700478467671862", "284607427949559937594459208626394373589", "79163444189722673396353217125001346885", "11925882930557433861975727949482165210", "131410400069573400899665492574082094645"], "threshold":0.9}, "id":"ASB-A-499053500-dec65120", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/5651177b24f8410e0c569fbaded96e628f08e3c4", "target":{"file":"transport.cpp"}}]}}, {"package":{"name":"platform/packages/modules/adb", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-09-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/adb/+/306ab4cbcb4e4dcc617cdc8bc6b9c8cad7fb3b28", "https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5"], "severity":"Critical", "spl":"2026-09-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"85935860183145777132797809884017660843", "length":692}, "id":"ASB-A-499053500-1ec6f51b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/306ab4cbcb4e4dcc617cdc8bc6b9c8cad7fb3b28", "target":{"file":"daemon/auth.cpp", "function":"transport_from_callback_arg"}}, {"deprecated":false, "digest":{"line_hashes":["201347976594503706699311040440373831505", "260874959964496991256816960723486837277", "68528373089758590918458031942994462164", "263143789194790534324974297836326807763", "182261942998819080205463738981143913032", "290533609952657922146991081198288338491", "44878213353551284943375713548259719012", "160743937665247659027923765464865966856", "2520742642356756046183170178349274208", "201099032936359238136866224047286752802", "68060143319095481271821421793850309384", "5574246830088354259307902012511919870", "213317150644517721561367439635501440621", "181647197572689677527573054911196225782", "275052822347904194176585551385371514324", "141414126420664879158211458890215833697", "299499256615448603658019264344052132698", "282433197904708193423740841891628063619", "293180300263506760550338827997472878318", "181021066879632656436848764839402829867", "49088385692449318969729688178656988624", "37463245829269288819031518132226923850", "88005044251085738311195700478467671862", "284607427949559937594459208626394373589", "79163444189722673396353217125001346885", "11925882930557433861975727949482165210", "131410400069573400899665492574082094645"], "threshold":0.9}, "id":"ASB-A-499053500-25ae40f5", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5", "target":{"file":"transport.cpp"}}, {"deprecated":false, "digest":{"function_hash":"68259553085829812739884907925193268974", "length":1172}, "id":"ASB-A-499053500-45f1eb5a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5", "target":{"file":"transport.cpp", "function":"FdConnection::DoTlsHandshake"}}, {"deprecated":false, "digest":{"function_hash":"133808897306689608483968929535118343161", "length":173}, "id":"ASB-A-499053500-49f87ada", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/306ab4cbcb4e4dcc617cdc8bc6b9c8cad7fb3b28", "target":{"file":"daemon/auth.cpp", "function":"transport_to_callback_arg"}}, {"deprecated":false, "digest":{"line_hashes":["44246072668983439390148067533045825594", "203184013069180869564976488290508197808", "73776561674086332947366643024603928307", "184857570419323916123490812049974724612", "290664200632557086196763467274379677126", "208919262436688842009814335991146917233", "169015762045903549219684152073238021201", "327178514315819310280409402158491487554", "292252948304809608849331532854240803704", "169858670430324741381451811478761611432", "187066739170006868060777853589738041664", "82651502943505659256971805190028302469", "55902198275941690946834699611198111625", "328438895880050661238090073356828234676", "181898245955836418949660775772609290728", "102201019438691637361781676995886952989"], "threshold":0.9}, "id":"ASB-A-499053500-7b8a84b7", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5", "target":{"file":"daemon/auth.cpp"}}, {"deprecated":false, "digest":{"line_hashes":["173010739123097531698422802604818074965", "169907421080577288046512616546451649334", "242404074545630772428486324107250096290", "235136211121210597119348234449832974424", "114568918938926965140285264357991440282", "148562374208343567048870333502665971629", "180747833584260176571626941026277047507", "144137230564792780644792149799228877342", "91066934623729648335345421246102721187", "279084401777254444616660845934857851487", "79416915775016457062389067088243507416", "274748577855150536855196877294408582858", "305137080477948318915756571928439418026", "253190489779438930077609599635231739549", "59930784335072035719153930868282449708", "4802944779634811330769744236131475220", "6439038411777416290037256764578651439", "288964617236352188856265710168258280597", "56910755955193388828915161095086884337", "171092454944421598675340368580904739427", "209064422562243965672467727307025243744", "146951163939315252188604184445925761926", "140384589355253479551704649993712733647", "205153879203671968104626124802246577596", "190649343455864397196154716729654564567", "316958103376571296710332603775344713259", "264507402409785977953938045986812816701", "198378422093956137436608922772874447265", "11468761926324111724005659517500638589"], "threshold":0.9}, "id":"ASB-A-499053500-ea9210c9", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/306ab4cbcb4e4dcc617cdc8bc6b9c8cad7fb3b28", "target":{"file":"daemon/auth.cpp"}}, {"deprecated":false, "digest":{"function_hash":"203990001823878910352410494377031318040", "length":540}, "id":"ASB-A-499053500-f60e9b71", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/fef945e86b020a045b8e14fc1ae27639e57714f5", "target":{"file":"daemon/auth.cpp", "function":"adbd_auth_tls_handshake"}}]}}, {"package":{"name":"platform/packages/modules/adb", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-09-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/adb/+/82897f1dd7435a64f01b815fc58e9f417835a63b", "https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8"], "severity":"Critical", "spl":"2026-09-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"133808897306689608483968929535118343161", "length":173}, "id":"ASB-A-499053500-110347fa", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/82897f1dd7435a64f01b815fc58e9f417835a63b", "target":{"file":"daemon/auth.cpp", "function":"transport_to_callback_arg"}}, {"deprecated":false, "digest":{"line_hashes":["173010739123097531698422802604818074965", "169907421080577288046512616546451649334", "242404074545630772428486324107250096290", "235136211121210597119348234449832974424", "114568918938926965140285264357991440282", "148562374208343567048870333502665971629", "180747833584260176571626941026277047507", "144137230564792780644792149799228877342", "91066934623729648335345421246102721187", "279084401777254444616660845934857851487", "79416915775016457062389067088243507416", "274748577855150536855196877294408582858", "305137080477948318915756571928439418026", "253190489779438930077609599635231739549", "59930784335072035719153930868282449708", "4802944779634811330769744236131475220", "6439038411777416290037256764578651439", "288964617236352188856265710168258280597", "56910755955193388828915161095086884337", "171092454944421598675340368580904739427", "209064422562243965672467727307025243744", "146951163939315252188604184445925761926", "140384589355253479551704649993712733647", "205153879203671968104626124802246577596", "190649343455864397196154716729654564567", "316958103376571296710332603775344713259", "264507402409785977953938045986812816701", "198378422093956137436608922772874447265", "11468761926324111724005659517500638589"], "threshold":0.9}, "id":"ASB-A-499053500-1e716e92", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/82897f1dd7435a64f01b815fc58e9f417835a63b", "target":{"file":"daemon/auth.cpp"}}, {"deprecated":false, "digest":{"line_hashes":["201347976594503706699311040440373831505", "260874959964496991256816960723486837277", "68528373089758590918458031942994462164", "263143789194790534324974297836326807763", "182261942998819080205463738981143913032", "290533609952657922146991081198288338491", "44878213353551284943375713548259719012", "160743937665247659027923765464865966856", "2520742642356756046183170178349274208", "201099032936359238136866224047286752802", "68060143319095481271821421793850309384", "5574246830088354259307902012511919870", "213317150644517721561367439635501440621", "181647197572689677527573054911196225782", "275052822347904194176585551385371514324", "141414126420664879158211458890215833697", "299499256615448603658019264344052132698", "282433197904708193423740841891628063619", "293180300263506760550338827997472878318", "181021066879632656436848764839402829867", "49088385692449318969729688178656988624", "37463245829269288819031518132226923850", "88005044251085738311195700478467671862", "284607427949559937594459208626394373589", "79163444189722673396353217125001346885", "11925882930557433861975727949482165210", "131410400069573400899665492574082094645"], "threshold":0.9}, "id":"ASB-A-499053500-7a70d0e3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8", "target":{"file":"transport.cpp"}}, {"deprecated":false, "digest":{"function_hash":"68259553085829812739884907925193268974", "length":1172}, "id":"ASB-A-499053500-89f4edf4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8", "target":{"file":"transport.cpp", "function":"FdConnection::DoTlsHandshake"}}, {"deprecated":false, "digest":{"line_hashes":["44246072668983439390148067533045825594", "203184013069180869564976488290508197808", "73776561674086332947366643024603928307", "99787801989753570256444708657401519946", "83995509246094547516431914283863239455", "75072465448569609560983573560866268344", "186928880968064794717981309552166894396", "327178514315819310280409402158491487554", "292252948304809608849331532854240803704", "169858670430324741381451811478761611432", "187066739170006868060777853589738041664", "82651502943505659256971805190028302469", "55902198275941690946834699611198111625", "328438895880050661238090073356828234676", "181898245955836418949660775772609290728", "102201019438691637361781676995886952989"], "threshold":0.9}, "id":"ASB-A-499053500-a73e3235", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8", "target":{"file":"daemon/auth.cpp"}}, {"deprecated":false, "digest":{"function_hash":"318611600218177984909965886271804270", "length":540}, "id":"ASB-A-499053500-eb9de58b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/d095f99b15647e53b968a27e21d53761d166c6e8", "target":{"file":"daemon/auth.cpp", "function":"adbd_auth_tls_handshake"}}, {"deprecated":false, "digest":{"function_hash":"85935860183145777132797809884017660843", "length":692}, "id":"ASB-A-499053500-ffbacdd8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/82897f1dd7435a64f01b815fc58e9f417835a63b", "target":{"file":"daemon/auth.cpp", "function":"transport_from_callback_arg"}}]}}, {"package":{"name":"platform/packages/modules/adb", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-09-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/adb/+/a5030c6e218a9d81cebdca4da77021ece883f782", "https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c"], "severity":"Critical", "spl":"2026-09-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"133808897306689608483968929535118343161", "length":173}, "id":"ASB-A-499053500-0f3a4040", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/a5030c6e218a9d81cebdca4da77021ece883f782", "target":{"file":"daemon/auth.cpp", "function":"transport_to_callback_arg"}}, {"deprecated":false, "digest":{"line_hashes":["201347976594503706699311040440373831505", "260874959964496991256816960723486837277", "68528373089758590918458031942994462164", "263143789194790534324974297836326807763", "182261942998819080205463738981143913032", "290533609952657922146991081198288338491", "44878213353551284943375713548259719012", "160743937665247659027923765464865966856", "2520742642356756046183170178349274208", "201099032936359238136866224047286752802", "68060143319095481271821421793850309384", "5574246830088354259307902012511919870", "213317150644517721561367439635501440621", "181647197572689677527573054911196225782", "275052822347904194176585551385371514324", "141414126420664879158211458890215833697", "299499256615448603658019264344052132698", "282433197904708193423740841891628063619", "293180300263506760550338827997472878318", "181021066879632656436848764839402829867", "49088385692449318969729688178656988624", "37463245829269288819031518132226923850", "88005044251085738311195700478467671862", "284607427949559937594459208626394373589", "79163444189722673396353217125001346885", "11925882930557433861975727949482165210", "131410400069573400899665492574082094645"], "threshold":0.9}, "id":"ASB-A-499053500-3032202e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c", "target":{"file":"transport.cpp"}}, {"deprecated":false, "digest":{"function_hash":"85935860183145777132797809884017660843", "length":692}, "id":"ASB-A-499053500-34b06a77", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/a5030c6e218a9d81cebdca4da77021ece883f782", "target":{"file":"daemon/auth.cpp", "function":"transport_from_callback_arg"}}, {"deprecated":false, "digest":{"function_hash":"68259553085829812739884907925193268974", "length":1172}, "id":"ASB-A-499053500-356f969c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c", "target":{"file":"transport.cpp", "function":"FdConnection::DoTlsHandshake"}}, {"deprecated":false, "digest":{"function_hash":"318611600218177984909965886271804270", "length":540}, "id":"ASB-A-499053500-3ccdbacc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c", "target":{"file":"daemon/auth.cpp", "function":"adbd_auth_tls_handshake"}}, {"deprecated":false, "digest":{"line_hashes":["173010739123097531698422802604818074965", "169907421080577288046512616546451649334", "242404074545630772428486324107250096290", "235136211121210597119348234449832974424", "114568918938926965140285264357991440282", "148562374208343567048870333502665971629", "180747833584260176571626941026277047507", "144137230564792780644792149799228877342", "91066934623729648335345421246102721187", "279084401777254444616660845934857851487", "79416915775016457062389067088243507416", "274748577855150536855196877294408582858", "305137080477948318915756571928439418026", "253190489779438930077609599635231739549", "59930784335072035719153930868282449708", "4802944779634811330769744236131475220", "6439038411777416290037256764578651439", "288964617236352188856265710168258280597", "56910755955193388828915161095086884337", "171092454944421598675340368580904739427", "209064422562243965672467727307025243744", "146951163939315252188604184445925761926", "140384589355253479551704649993712733647", "205153879203671968104626124802246577596", "190649343455864397196154716729654564567", "316958103376571296710332603775344713259", "264507402409785977953938045986812816701", "198378422093956137436608922772874447265", "11468761926324111724005659517500638589"], "threshold":0.9}, "id":"ASB-A-499053500-3d8da35f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/a5030c6e218a9d81cebdca4da77021ece883f782", "target":{"file":"daemon/auth.cpp"}}, {"deprecated":false, "digest":{"line_hashes":["44246072668983439390148067533045825594", "203184013069180869564976488290508197808", "73776561674086332947366643024603928307", "99787801989753570256444708657401519946", "83995509246094547516431914283863239455", "75072465448569609560983573560866268344", "186928880968064794717981309552166894396", "327178514315819310280409402158491487554", "292252948304809608849331532854240803704", "169858670430324741381451811478761611432", "187066739170006868060777853589738041664", "82651502943505659256971805190028302469", "55902198275941690946834699611198111625", "328438895880050661238090073356828234676", "181898245955836418949660775772609290728", "102201019438691637361781676995886952989"], "threshold":0.9}, "id":"ASB-A-499053500-54f3bea1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/d602fe6d2d029aecc6fa23200d1614bdb997012c", "target":{"file":"daemon/auth.cpp"}}]}}, {"package":{"name":"platform/packages/modules/adb", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-09-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/adb/+/ea885606faf989081914b3aa699d42d0a46abb28", "https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87"], "severity":"Critical", "spl":"2026-09-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["173010739123097531698422802604818074965", "169907421080577288046512616546451649334", "242404074545630772428486324107250096290", "235136211121210597119348234449832974424", "114568918938926965140285264357991440282", "148562374208343567048870333502665971629", "180747833584260176571626941026277047507", "144137230564792780644792149799228877342", "91066934623729648335345421246102721187", "279084401777254444616660845934857851487", "79416915775016457062389067088243507416", "274748577855150536855196877294408582858", "305137080477948318915756571928439418026", "253190489779438930077609599635231739549", "59930784335072035719153930868282449708", "4802944779634811330769744236131475220", "6439038411777416290037256764578651439", "288964617236352188856265710168258280597", "56910755955193388828915161095086884337", "171092454944421598675340368580904739427", "209064422562243965672467727307025243744", "146951163939315252188604184445925761926", "140384589355253479551704649993712733647", "205153879203671968104626124802246577596", "190649343455864397196154716729654564567", "316958103376571296710332603775344713259", "264507402409785977953938045986812816701", "198378422093956137436608922772874447265", "11468761926324111724005659517500638589"], "threshold":0.9}, "id":"ASB-A-499053500-06e8f7f4", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/ea885606faf989081914b3aa699d42d0a46abb28", "target":{"file":"daemon/auth.cpp"}}, {"deprecated":false, "digest":{"line_hashes":["44246072668983439390148067533045825594", "203184013069180869564976488290508197808", "73776561674086332947366643024603928307", "99787801989753570256444708657401519946", "83995509246094547516431914283863239455", "75072465448569609560983573560866268344", "186928880968064794717981309552166894396", "327178514315819310280409402158491487554", "292252948304809608849331532854240803704", "169858670430324741381451811478761611432", "187066739170006868060777853589738041664", "82651502943505659256971805190028302469", "55902198275941690946834699611198111625", "328438895880050661238090073356828234676", "181898245955836418949660775772609290728", "102201019438691637361781676995886952989"], "threshold":0.9}, "id":"ASB-A-499053500-0b141983", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87", "target":{"file":"daemon/auth.cpp"}}, {"deprecated":false, "digest":{"function_hash":"133808897306689608483968929535118343161", "length":173}, "id":"ASB-A-499053500-0cfac820", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/ea885606faf989081914b3aa699d42d0a46abb28", "target":{"file":"daemon/auth.cpp", "function":"transport_to_callback_arg"}}, {"deprecated":false, "digest":{"function_hash":"68259553085829812739884907925193268974", "length":1172}, "id":"ASB-A-499053500-3924540e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87", "target":{"file":"transport.cpp", "function":"FdConnection::DoTlsHandshake"}}, {"deprecated":false, "digest":{"function_hash":"318611600218177984909965886271804270", "length":540}, "id":"ASB-A-499053500-4449f9ea", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87", "target":{"file":"daemon/auth.cpp", "function":"adbd_auth_tls_handshake"}}, {"deprecated":false, "digest":{"line_hashes":["201347976594503706699311040440373831505", "260874959964496991256816960723486837277", "68528373089758590918458031942994462164", "263143789194790534324974297836326807763", "182261942998819080205463738981143913032", "290533609952657922146991081198288338491", "44878213353551284943375713548259719012", "160743937665247659027923765464865966856", "2520742642356756046183170178349274208", "201099032936359238136866224047286752802", "68060143319095481271821421793850309384", "5574246830088354259307902012511919870", "213317150644517721561367439635501440621", "181647197572689677527573054911196225782", "275052822347904194176585551385371514324", "141414126420664879158211458890215833697", "299499256615448603658019264344052132698", "282433197904708193423740841891628063619", "293180300263506760550338827997472878318", "181021066879632656436848764839402829867", "49088385692449318969729688178656988624", "37463245829269288819031518132226923850", "88005044251085738311195700478467671862", "284607427949559937594459208626394373589", "79163444189722673396353217125001346885", "11925882930557433861975727949482165210", "131410400069573400899665492574082094645"], "threshold":0.9}, "id":"ASB-A-499053500-c56cbd73", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/9d6f9c389fb7cfa7c78ca3ea025d4b36b1adbd87", "target":{"file":"transport.cpp"}}, {"deprecated":false, "digest":{"function_hash":"85935860183145777132797809884017660843", "length":692}, "id":"ASB-A-499053500-e1bc7b1d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/ea885606faf989081914b3aa699d42d0a46abb28", "target":{"file":"daemon/auth.cpp", "function":"transport_from_callback_arg"}}]}}, {"package":{"name":"platform/packages/modules/adb", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-09-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/adb/+/bdc7a2c6f0390541d4f26e1dc4ba326adbffaaa0", "https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82"], "severity":"Critical", "spl":"2026-09-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"85935860183145777132797809884017660843", "length":692}, "id":"ASB-A-499053500-269ac13f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/bdc7a2c6f0390541d4f26e1dc4ba326adbffaaa0", "target":{"file":"daemon/auth.cpp", "function":"transport_from_callback_arg"}}, {"deprecated":false, "digest":{"function_hash":"133808897306689608483968929535118343161", "length":173}, "id":"ASB-A-499053500-37ae3633", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/bdc7a2c6f0390541d4f26e1dc4ba326adbffaaa0", "target":{"file":"daemon/auth.cpp", "function":"transport_to_callback_arg"}}, {"deprecated":false, "digest":{"function_hash":"68259553085829812739884907925193268974", "length":1172}, "id":"ASB-A-499053500-41d6920d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82", "target":{"file":"transport.cpp", "function":"FdConnection::DoTlsHandshake"}}, {"deprecated":false, "digest":{"line_hashes":["201347976594503706699311040440373831505", "260874959964496991256816960723486837277", "68528373089758590918458031942994462164", "263143789194790534324974297836326807763", "182261942998819080205463738981143913032", "290533609952657922146991081198288338491", "44878213353551284943375713548259719012", "160743937665247659027923765464865966856", "2520742642356756046183170178349274208", "201099032936359238136866224047286752802", "68060143319095481271821421793850309384", "5574246830088354259307902012511919870", "213317150644517721561367439635501440621", "181647197572689677527573054911196225782", "275052822347904194176585551385371514324", "141414126420664879158211458890215833697", "299499256615448603658019264344052132698", "282433197904708193423740841891628063619", "293180300263506760550338827997472878318", "181021066879632656436848764839402829867", "49088385692449318969729688178656988624", "37463245829269288819031518132226923850", "88005044251085738311195700478467671862", "284607427949559937594459208626394373589", "79163444189722673396353217125001346885", "11925882930557433861975727949482165210", "131410400069573400899665492574082094645"], "threshold":0.9}, "id":"ASB-A-499053500-46c7d6c2", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82", "target":{"file":"transport.cpp"}}, {"deprecated":false, "digest":{"line_hashes":["173010739123097531698422802604818074965", "169907421080577288046512616546451649334", "242404074545630772428486324107250096290", "235136211121210597119348234449832974424", "114568918938926965140285264357991440282", "148562374208343567048870333502665971629", "180747833584260176571626941026277047507", "144137230564792780644792149799228877342", "91066934623729648335345421246102721187", "279084401777254444616660845934857851487", "79416915775016457062389067088243507416", "274748577855150536855196877294408582858", "305137080477948318915756571928439418026", "253190489779438930077609599635231739549", "59930784335072035719153930868282449708", "4802944779634811330769744236131475220", "6439038411777416290037256764578651439", "288964617236352188856265710168258280597", "56910755955193388828915161095086884337", "171092454944421598675340368580904739427", "209064422562243965672467727307025243744", "146951163939315252188604184445925761926", "140384589355253479551704649993712733647", "205153879203671968104626124802246577596", "190649343455864397196154716729654564567", "316958103376571296710332603775344713259", "264507402409785977953938045986812816701", "198378422093956137436608922772874447265", "11468761926324111724005659517500638589"], "threshold":0.9}, "id":"ASB-A-499053500-5c6976ea", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/bdc7a2c6f0390541d4f26e1dc4ba326adbffaaa0", "target":{"file":"daemon/auth.cpp"}}, {"deprecated":false, "digest":{"function_hash":"203990001823878910352410494377031318040", "length":540}, "id":"ASB-A-499053500-782bd627", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82", "target":{"file":"daemon/auth.cpp", "function":"adbd_auth_tls_handshake"}}, {"deprecated":false, "digest":{"line_hashes":["44246072668983439390148067533045825594", "203184013069180869564976488290508197808", "73776561674086332947366643024603928307", "184857570419323916123490812049974724612", "290664200632557086196763467274379677126", "208919262436688842009814335991146917233", "169015762045903549219684152073238021201", "327178514315819310280409402158491487554", "292252948304809608849331532854240803704", "169858670430324741381451811478761611432", "187066739170006868060777853589738041664", "82651502943505659256971805190028302469", "55902198275941690946834699611198111625", "328438895880050661238090073356828234676", "181898245955836418949660775772609290728", "102201019438691637361781676995886952989"], "threshold":0.9}, "id":"ASB-A-499053500-7a30dd6b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/adb/+/ace61f86b4ff0ac67074ee9d879c93a7e1416f82", "target":{"file":"daemon/auth.cpp"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-09-01"}]}