{"id":"ASB-A-519884370", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-59002", "A-519884370"], "details":"In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f257fe7809282fa3c34e31851df99ad9f2f803ab"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"18237245118701700326200780875349528246", "length":3102}, "id":"ASB-A-519884370-17c82d2d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f257fe7809282fa3c34e31851df99ad9f2f803ab", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"handleMessage"}}, {"deprecated":false, "digest":{"line_hashes":["185997006276593719974238053503278319575", "93906479424819124857740885275296440180", "259454809899761942225616410753409181268", "153345524672967060248689445871995406367", "291374424344446462852108375233167684634", "140221536153661281371407326755103500234", "208979599059720471021125682829406010814", "195803785267529664721182660969326938275", "163084432054370082767565117614665984723", "335831948167273581854191276434470828077", "298577085831459822992571937442984016915"], "threshold":0.9}, "id":"ASB-A-519884370-8182f700", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f257fe7809282fa3c34e31851df99ad9f2f803ab", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ee0f41705ee6a4006f62c30e0538cdd6ee38b3a4"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["185997006276593719974238053503278319575", "93906479424819124857740885275296440180", "259454809899761942225616410753409181268", "153345524672967060248689445871995406367", "291374424344446462852108375233167684634", "140221536153661281371407326755103500234", "208979599059720471021125682829406010814", "195803785267529664721182660969326938275", "163084432054370082767565117614665984723", "335831948167273581854191276434470828077", "298577085831459822992571937442984016915"], "threshold":0.9}, "id":"ASB-A-519884370-212d9cbd", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ee0f41705ee6a4006f62c30e0538cdd6ee38b3a4", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}}, {"deprecated":false, "digest":{"function_hash":"195840142014621201303541102181351292658", "length":2898}, "id":"ASB-A-519884370-8519ee08", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ee0f41705ee6a4006f62c30e0538cdd6ee38b3a4", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"handleMessage"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/889c5494dfe0be59755beeb687ad7c84df92d038"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["185997006276593719974238053503278319575", "93906479424819124857740885275296440180", "259454809899761942225616410753409181268", "153345524672967060248689445871995406367", "291374424344446462852108375233167684634", "140221536153661281371407326755103500234", "208979599059720471021125682829406010814", "195803785267529664721182660969326938275", "163084432054370082767565117614665984723", "335831948167273581854191276434470828077", "298577085831459822992571937442984016915"], "threshold":0.9}, "id":"ASB-A-519884370-50469fa6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/889c5494dfe0be59755beeb687ad7c84df92d038", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}}, {"deprecated":false, "digest":{"function_hash":"195840142014621201303541102181351292658", "length":2898}, "id":"ASB-A-519884370-72e1be17", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/889c5494dfe0be59755beeb687ad7c84df92d038", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"handleMessage"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5432b804c313db814cfaac328bc3047d625c69c5"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["185997006276593719974238053503278319575", "93906479424819124857740885275296440180", "259454809899761942225616410753409181268", "153345524672967060248689445871995406367", "291374424344446462852108375233167684634", "140221536153661281371407326755103500234", "208979599059720471021125682829406010814", "195803785267529664721182660969326938275", "163084432054370082767565117614665984723", "335831948167273581854191276434470828077", "298577085831459822992571937442984016915"], "threshold":0.9}, "id":"ASB-A-519884370-03befc44", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5432b804c313db814cfaac328bc3047d625c69c5", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}}, {"deprecated":false, "digest":{"function_hash":"195840142014621201303541102181351292658", "length":2898}, "id":"ASB-A-519884370-14259ee7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5432b804c313db814cfaac328bc3047d625c69c5", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"handleMessage"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/25ff242509e57e58376b3b94561fe7e57a0567f8"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"18237245118701700326200780875349528246", "length":3102}, "id":"ASB-A-519884370-be31a26e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/25ff242509e57e58376b3b94561fe7e57a0567f8", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"handleMessage"}}, {"deprecated":false, "digest":{"line_hashes":["185997006276593719974238053503278319575", "93906479424819124857740885275296440180", "259454809899761942225616410753409181268", "153345524672967060248689445871995406367", "291374424344446462852108375233167684634", "140221536153661281371407326755103500234", "208979599059720471021125682829406010814", "195803785267529664721182660969326938275", "163084432054370082767565117614665984723", "335831948167273581854191276434470828077", "298577085831459822992571937442984016915"], "threshold":0.9}, "id":"ASB-A-519884370-cb844871", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/25ff242509e57e58376b3b94561fe7e57a0567f8", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2db753371d1cf8c093ee4ab80f0b6682f724a400"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["185997006276593719974238053503278319575", "93906479424819124857740885275296440180", "259454809899761942225616410753409181268", "153345524672967060248689445871995406367", "291374424344446462852108375233167684634", "140221536153661281371407326755103500234", "208979599059720471021125682829406010814", "195803785267529664721182660969326938275", "163084432054370082767565117614665984723", "335831948167273581854191276434470828077", "298577085831459822992571937442984016915"], "threshold":0.9}, "id":"ASB-A-519884370-709c0b2f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2db753371d1cf8c093ee4ab80f0b6682f724a400", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}}, {"deprecated":false, "digest":{"function_hash":"195840142014621201303541102181351292658", "length":2898}, "id":"ASB-A-519884370-8f6c7287", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2db753371d1cf8c093ee4ab80f0b6682f724a400", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"handleMessage"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}