Logic Error in UsbDeviceManager Allows Bypass of Lock Screen on Android Devices

CVE-2026-59002

What is CVE-2026-59002?

A vulnerability exists within the UsbDeviceManager component of Android, where a logic error in the handleMessage function can allow unauthorized access to the device's lock screen. This flaw permits physical information disclosure without requiring additional execution privileges or user interaction, making it a potential target for attackers seeking to exploit device security.

References