Android CVE-2026-0073 wireless ADB auth flaw

Affected Environment
Android devices with security patch levels earlier than 2026-05-05 are exposed. Devices updated to 2026-05-05 include the relevant fixes.

Threat Overview
CVE-2026-0073 affects Android wireless ADB authentication. An attacker on a nearby or adjacent network may execute code as the shell user.

Exposure Timeline
Google’s bulletin lists this issue in the 2026-05-01 security patch level. Devices remain exposed until the 2026-05-01 or 2026-05-05 patches are applied.

Attack Surface
Exposure exists where wireless ADB is reachable on proximal or adjacent networks. Devices using default or unpatched adbd components are in scope.

Technical Root Cause
A logic error in adbd_tls_verify_cert in auth.cpp allows bypass of mutual TLS certificate verification. This weakens wireless ADB authentication controls.

Exploitation Pathway
An attacker on a nearby network targets the wireless ADB channel. By bypassing mutual authentication, they can achieve remote shell-level code execution.