CVE-2026-0073
In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lea...
Original description
The description as published by the source.
In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution as the shell user with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected packages
Android
platform/packages/modules/adb
[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-05-01"}]}]
References
- advisory source.android.com
- patch android.googlesource.com