ASB-A-492683684

vendorUSosv

view advisory published 2026-09-01Licence: per source

In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-28652US	—OT elevated	0.20% (10th)	—	2026-09-08
In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional ex…

references

External citations — patches, advisories, analysis.

https://android.googlesource.com/platform/packages/modules/Uwb/+/3be00374c294c51c56ce29fb0ca1f0251652f02dFIX
https://source.android.com/security/bulletin/2026-09-01ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan