CVE-2026-0073

In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution as the shell user with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Android

Google Android

= 14.0, 15.0, 16.0

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

0.5% (43th percentile)

Weakness

CWE-303

NVD status

Analyzed

Published

2026-05-04