Skip to content
OpenAdvisories
Low · 3.1 CVE-2026-28652 EUVD-2026-73984GHSA-w36h-x2f4-5cpr

In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote inf…

Published Sep 8, 2026 · Updated Sep 10, 2026 · Assigned by google_android

Description

In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17, 16-qpr2, 16 —

Advisories 1

References