¡¾Îó²îͨ¸æ¡¿Android ADB ÈÏÖ¤ÈƹýÎó²î(CVE-2026-0073)

Ðû²¼Ê±¼ä 2026-05-06

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

Android ADB ÈÏÖ¤ÈƹýÎó²î

CVE   ID

CVE-2026-0073

Îó²îÀàÐÍ

ÈÏÖ¤Èƹý

·¢Ã÷ʱ¼ä

2026-5-6

Îó²îÆÀ·Ö

8.8

Îó²îÆ·¼¶

¸ßΣ

¹¥»÷ÏòÁ¿

¾ÖÓòÍø

ËùÐèȨÏÞ

ÎÞ

ʹÓÃÄѶÈ

µÍ

Óû§½»»¥

²»ÐèÒª

PoC/EXP

ÒѹûÕæ

ÔÚҰʹÓÃ

δ·¢Ã÷


AndroidÊÇGoogleÍƳöµÄÒƶ¯²Ù×÷ϵͳ £¬ÆÕ±éÓ¦ÓÃÓÚÖÇÄÜÊÖ»ú¡¢Æ½°å¼°Ç¶Èëʽװ±¸ £¬ÌṩӦÓóÌÐò¹ÜÀí¡¢Ó²¼þÇý¶¯¡¢ÏµÍ³Çå¾²ºÍÍøÂçͨѶ¹¦Ð§ £¬Ö§³Öwireless ADBµ÷ÊÔ¼°Ô¶³Ì¹ÜÀí¡£


2026Äê5ÔÂ6ÈÕ £¬¿áÓιÙÍøÇå¾²Ó¦¼±ÏìÓ¦ÖÐÐÄ£¨VSRC£©¼à²âµ½Android ADBÈÏÖ¤ÈƹýÎó²î¡£¸ÃÎó²î±£´æÓÚplatform/packages/modules/adb/daemon/auth.cppÎļþÖÐ £¬ÓÉÓÚadbd_tls_verify_certʹÓÃEVP_PKEY_cmpÑéÖ¤¿Í»§¶ËÖ¤Ê鹫ԿʱºöÂÔ¿çËã·¨½ÏÁ¿·µ»ØÖµ £¬µ¼Ö¹¥»÷Õß¿ÉÔÚÎÞÐèÓû§½»»¥ÇéÐÎÏÂÈƹýÉí·ÝÑéÖ¤ £¬Í¨¹ýÌṩ·ÇRSA TLS¿Í»§¶ËÖ¤Êé³ÉΪÊÚȨADB host²¢»ñÈ¡shellÓû§È¨ÏÞ £¬´Ó¶øÔ¶³Ì»á¼ûϵͳµ÷ÊÔ½Ó¿Ú £¬¶ÁÈ¡Ãô¸ÐÐÅÏ¢¡¢Ö´ÐÐÏÂÁî¡¢ÐÞ¸ÄÉèÖà £¬¿ÉÄÜÎ¥·´Êý¾Ý±  £»¤ºÍÆóÒµÇå¾²Õþ²ß £¬¶Ô»ú¹¹ºÍÓû§Çå¾²Ôì³ÉÑÏÖØÓ°Ïì¡£


¶þ¡¢Ó°Ïì¹æÄ£


Android 14 < 2026-05-01Çå¾²²¹¶¡
Android 15 < 2026-05-01Çå¾²²¹¶¡
Android 16 < 2026-05-01Çå¾²²¹¶¡
Android 16-qpr2 < 2026-05-01Çå¾²²¹¶¡


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


¹Ù·½ÒÑÐû²¼ÐÞ¸´²¹¶¡ £¬ÒÔÐÞ¸´¸ÃÎó²î¡£
×°ÖÃAndroidϵͳÇå¾²²¹¶¡2026-05-01»ò¸ü¸ß°æ±¾ £¬È·±£adbd×Ó×é¼þÒÑÐÞ¸´Îó²î


ÏÂÔØÁ´½Ó£ºhttps://source.android.com/docs/security/bulletin/2026/2026-05-01?hl=zh-cn/


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£


3.3 ͨÓý¨Òé


? °´ÆÚ¸üÐÂϵͳ²¹¶¡ £¬ïÔ̭ϵͳÎó²î £¬ÌáÉý·þÎñÆ÷µÄÇå¾²ÐÔ¡£
? ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ £¬Ð޸ķÀ»ðǽսÂÔ £¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻò·þÎñ £¬ïÔÌ­½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø £¬ïÔÌ­¹¥»÷Ãæ¡£
? Ê¹ÓÃÆóÒµ¼¶Çå¾²²úÆ· £¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£
? ÔöǿϵͳÓû§ºÍȨÏÞ¹ÜÀí £¬ÆôÓöàÒòËØÈÏÖ¤»úÖƺÍ×îСȨÏÞÔ­Ôò £¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏ޶ȡ£
? ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£


3.4 ²Î¿¼Á´½Ó


https://source.android.com/docs/security/bulletin/2026/2026-05-01?hl=zh-cn/
https://barghest.asia/blog/cve-2026-0073-adb-tls-auth-bypass/