CVE-2026-0073

In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution as the shell user with no additional execution privileges needed. User interaction is not needed for exploitation.

Score
CVSS 3.1 8.8 High
Status
Analyzed - security@android.com
Published
2026-05-04
Last modified
2026-10-26
Weaknesses
CWE-303

Affected products

References

 
 
© AVABIS GmbH privacypolicy about