{"id":"ASB-A-522373825", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-02T16:38:00.081625681Z", "aliases":["CVE-2026-59028", "A-522373825"], "details":"In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/modules/Nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Nfc/+/a810afd69488a55248e17e1ef94c9dc9d9c11608"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"265928023664238408722650893218740478691", "length":3566}, "id":"ASB-A-522373825-1eafc145", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/a810afd69488a55248e17e1ef94c9dc9d9c11608", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java", "function":"resolveAidConflictLocked"}}, {"deprecated":false, "digest":{"line_hashes":["306818195370565809325377590687793782952", "274582545198659872994016440925987448491", "62990015994409936974287230004420250731", "91408781466968858845307733352226215089", "97611472942514387544339195174586080472", "135689961710789054162583161441643340575", "38273128420282599557823661933830414111", "56402293073574025692410360036437137182", "306852349687099053977963613936631239563", "287744229732938287108597001156320832790", "315759275126819732316670767498268300326", "224514692031900788763314193016795778833", "262560585798237266602341068871246722111"], "threshold":0.9}, "id":"ASB-A-522373825-7ab4f118", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/a810afd69488a55248e17e1ef94c9dc9d9c11608", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java"}}, {"deprecated":false, "digest":{"function_hash":"51503526070660967392803370877024488461", "length":2651}, "id":"ASB-A-522373825-ab8f88e2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/a810afd69488a55248e17e1ef94c9dc9d9c11608", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java", "function":"resolveAidConflictLocked"}}]}}, {"package":{"name":"platform/packages/apps/Nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/090c5c3bb70b4350cc495ffbed3aed54be2f4767"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"158732649799380634307256924704112694204", "length":2425}, "id":"ASB-A-522373825-34b08d11", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/090c5c3bb70b4350cc495ffbed3aed54be2f4767", "target":{"file":"src/com/android/nfc/cardemulation/RegisteredAidCache.java", "function":"resolveAidConflictLocked"}}, {"deprecated":false, "digest":{"function_hash":"297951326009822698519460294502520530822", "length":2570}, "id":"ASB-A-522373825-8c2dee0f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/090c5c3bb70b4350cc495ffbed3aed54be2f4767", "target":{"file":"src/com/android/nfc/cardemulation/RegisteredAidCache.java", "function":"resolveAidConflictLocked"}}, {"deprecated":false, "digest":{"line_hashes":["150971658409956539972988160756512166704", "261828516749889997301603641465396620360", "71372986022485986898190461602793759398", "91408781466968858845307733352226215089", "97611472942514387544339195174586080472", "113172363721416971795201575162516106853", "288439348378415454978016270404534407163", "38273128420282599557823661933830414111", "246799484598677769987456967882418985772", "49924606287640992802817283926128671581", "177584893863937796778049700843312674647", "53156013376983319427733069093502617797", "65272975156520916600768357955978497764"], "threshold":0.9}, "id":"ASB-A-522373825-8d358053", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/090c5c3bb70b4350cc495ffbed3aed54be2f4767", "target":{"file":"src/com/android/nfc/cardemulation/RegisteredAidCache.java"}}]}}, {"package":{"name":"platform/packages/modules/Nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Nfc/+/0ab1d66e54edc7fdd64c2236578a8839793b1408"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"62420813378767436160727005269590283101", "length":2644}, "id":"ASB-A-522373825-b4d777a0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/0ab1d66e54edc7fdd64c2236578a8839793b1408", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java", "function":"resolveAidConflictLocked"}}, {"deprecated":false, "digest":{"function_hash":"207330028648753242523987987365816363547", "length":3507}, "id":"ASB-A-522373825-b503604f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/0ab1d66e54edc7fdd64c2236578a8839793b1408", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java", "function":"resolveAidConflictLocked"}}, {"deprecated":false, "digest":{"line_hashes":["306818195370565809325377590687793782952", "274582545198659872994016440925987448491", "62990015994409936974287230004420250731", "91408781466968858845307733352226215089", "97611472942514387544339195174586080472", "135689961710789054162583161441643340575", "38273128420282599557823661933830414111", "269587506768809283590619312510475097010", "217800789033221475240799590571686882908", "83479519267321003115826213305194270360", "290344604867298189197057658963653495059", "224514692031900788763314193016795778833", "262560585798237266602341068871246722111"], "threshold":0.9}, "id":"ASB-A-522373825-bd4da341", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/0ab1d66e54edc7fdd64c2236578a8839793b1408", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java"}}]}}, {"package":{"name":"platform/packages/modules/Nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Nfc/+/7e11b6d4081a973737aedca82ac46c6d55a8ef7c"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"275175868987105713552315984552205134603", "length":3619}, "id":"ASB-A-522373825-34ecc396", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/7e11b6d4081a973737aedca82ac46c6d55a8ef7c", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java", "function":"resolveAidConflictLocked"}}, {"deprecated":false, "digest":{"function_hash":"51503526070660967392803370877024488461", "length":2651}, "id":"ASB-A-522373825-4fba43d2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/7e11b6d4081a973737aedca82ac46c6d55a8ef7c", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java", "function":"resolveAidConflictLocked"}}, {"deprecated":false, "digest":{"line_hashes":["306818195370565809325377590687793782952", "274582545198659872994016440925987448491", "62990015994409936974287230004420250731", "91408781466968858845307733352226215089", "97611472942514387544339195174586080472", "135689961710789054162583161441643340575", "38273128420282599557823661933830414111", "56402293073574025692410360036437137182", "306852349687099053977963613936631239563", "287744229732938287108597001156320832790", "315759275126819732316670767498268300326", "224514692031900788763314193016795778833", "262560585798237266602341068871246722111"], "threshold":0.9}, "id":"ASB-A-522373825-bd007076", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/7e11b6d4081a973737aedca82ac46c6d55a8ef7c", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java"}}]}}, {"package":{"name":"platform/packages/modules/Nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Nfc/+/5727f605d44162b09f0e2fe92e273818637146cc"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["306818195370565809325377590687793782952", "274582545198659872994016440925987448491", "62990015994409936974287230004420250731", "91408781466968858845307733352226215089", "97611472942514387544339195174586080472", "135689961710789054162583161441643340575", "38273128420282599557823661933830414111", "56402293073574025692410360036437137182", "306852349687099053977963613936631239563", "287744229732938287108597001156320832790", "315759275126819732316670767498268300326", "224514692031900788763314193016795778833", "262560585798237266602341068871246722111"], "threshold":0.9}, "id":"ASB-A-522373825-06bcaab2", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/5727f605d44162b09f0e2fe92e273818637146cc", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java"}}, {"deprecated":false, "digest":{"function_hash":"265928023664238408722650893218740478691", "length":3566}, "id":"ASB-A-522373825-c294b291", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/5727f605d44162b09f0e2fe92e273818637146cc", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java", "function":"resolveAidConflictLocked"}}, {"deprecated":false, "digest":{"function_hash":"51503526070660967392803370877024488461", "length":2651}, "id":"ASB-A-522373825-c6484b1f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Nfc/+/5727f605d44162b09f0e2fe92e273818637146cc", "target":{"file":"NfcNci/src/com/android/nfc/cardemulation/RegisteredAidCache.java", "function":"resolveAidConflictLocked"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}