CVE-2026-0050: Low severity Google Android vulnerability
In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Add or enforce appropriate permission checks inside handleBondStateChanged so that sensitive information is not disclosed to callers without the required permissions.
AdapterService.java (handleBondStateChanged) permission checks = enforce caller permission validation before returning sensitive information
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0050?
The severity of CVE-2026-0050 is classified as low with a score of 3.3.
What type of vulnerability is CVE-2026-0050?
CVE-2026-0050 is a permissions bypass vulnerability that may lead to sensitive information disclosure.
How does CVE-2026-0050 affect Google Android?
CVE-2026-0050 affects Google Android by allowing local information disclosure without requiring additional execution privileges.
Is user interaction needed to exploit CVE-2026-0050?
No, user interaction is not needed to exploit CVE-2026-0050.
What potential impact does CVE-2026-0050 have?
The potential impact of CVE-2026-0050 is the local disclosure of sensitive information.