¡¾Îó²îͨ¸æ¡¿Android ADB ÈÏÖ¤ÈƹýÎó²î(CVE-2026-0073)

Ðû²¼Ê±¼ä 2026-05-06

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

Android ADB ÈÏÖ¤ÈƹýÎó²î

CVE   ID

CVE-2026-0073

Îó²îÀàÐÍ

ÈÏÖ¤Èƹý

·¢Ã÷ʱ¼ä

2026-5-6

Îó²îÆÀ·Ö

8.8

Îó²îÆ·¼¶

¸ßΣ

¹¥»÷ÏòÁ¿

¾ÖÓòÍø

ËùÐèȨÏÞ

ÎÞ

ʹÓÃÄѶÈ

µÍ

Óû§½»»¥

²»ÐèÒª

PoC/EXP

ÒѹûÕæ

ÔÚҰʹÓÃ

δ·¢Ã÷


AndroidÊÇGoogleÍƳöµÄÒƶ¯²Ù×÷ϵͳ£¬ÆÕ±éÓ¦ÓÃÓÚÖÇÄÜÊÖ»ú¡¢Æ½°å¼°Ç¶Èëʽװ±¸£¬ÌṩӦÓóÌÐò¹ÜÀí¡¢Ó²¼þÇý¶¯¡¢ÏµÍ³Çå¾²ºÍÍøÂçͨѶ¹¦Ð§£¬Ö§³Öwireless ADBµ÷ÊÔ¼°Ô¶³Ì¹ÜÀí¡£


2026Äê5ÔÂ6ÈÕ£¬×ðÁú¿­¹ÙÍøÈë¿ÚÇå¾²Ó¦¼±ÏìÓ¦ÖÐÐÄ£¨VSRC£©¼à²âµ½Android ADBÈÏÖ¤ÈƹýÎó²î¡£¸ÃÎó²î±£´æÓÚplatform/packages/modules/adb/daemon/auth.cppÎļþÖУ¬ÓÉÓÚadbd_tls_verify_certʹÓÃEVP_PKEY_cmpÑéÖ¤¿Í»§¶ËÖ¤Ê鹫ԿʱºöÂÔ¿çËã·¨½ÏÁ¿·µ»ØÖµ£¬µ¼Ö¹¥»÷Õß¿ÉÔÚÎÞÐèÓû§½»»¥ÇéÐÎÏÂÈƹýÉí·ÝÑéÖ¤£¬Í¨¹ýÌṩ·ÇRSA TLS¿Í»§¶ËÖ¤Êé³ÉΪÊÚȨADB host²¢»ñÈ¡shellÓû§È¨ÏÞ£¬´Ó¶øÔ¶³Ì»á¼ûϵͳµ÷ÊÔ½Ó¿Ú£¬¶ÁÈ¡Ãô¸ÐÐÅÏ¢¡¢Ö´ÐÐÏÂÁî¡¢ÐÞ¸ÄÉèÖ㬿ÉÄÜÎ¥·´Êý¾Ý±£»¤ºÍÆóÒµÇå¾²Õþ²ß£¬¶Ô»ú¹¹ºÍÓû§Çå¾²Ôì³ÉÑÏÖØÓ°Ïì¡£


¶þ¡¢Ó°Ïì¹æÄ£


Android 14 < 2026-05-01Çå¾²²¹¶¡
Android 15 < 2026-05-01Çå¾²²¹¶¡
Android 16 < 2026-05-01Çå¾²²¹¶¡
Android 16-qpr2 < 2026-05-01Çå¾²²¹¶¡


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


¹Ù·½ÒÑÐû²¼ÐÞ¸´²¹¶¡£¬ÒÔÐÞ¸´¸ÃÎó²î¡£
×°ÖÃAndroidϵͳÇå¾²²¹¶¡2026-05-01»ò¸ü¸ß°æ±¾£¬È·±£adbd×Ó×é¼þÒÑÐÞ¸´Îó²î


ÏÂÔØÁ´½Ó£ºhttps://source.android.com/docs/security/bulletin/2026/2026-05-01?hl=zh-cn/


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£


3.3 ͨÓý¨Òé


? °´ÆÚ¸üÐÂϵͳ²¹¶¡£¬ïÔ̭ϵͳÎó²î£¬ÌáÉý·þÎñÆ÷µÄÇå¾²ÐÔ¡£
? ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬Ð޸ķÀ»ðǽսÂÔ£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻò·þÎñ£¬ïÔÌ­½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬ïÔÌ­¹¥»÷Ãæ¡£
? Ê¹ÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£
? ÔöǿϵͳÓû§ºÍȨÏÞ¹ÜÀí£¬ÆôÓöàÒòËØÈÏÖ¤»úÖƺÍ×îСȨÏÞÔ­Ôò£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏ޶ȡ£
? ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£


3.4 ²Î¿¼Á´½Ó


https://source.android.com/docs/security/bulletin/2026/2026-05-01?hl=zh-cn/
https://barghest.asia/blog/cve-2026-0073-adb-tls-auth-bypass/