Google Chrome on Android Drag and Drop improper input validation

#!/usr/bin/env python3
# check_chrome_android_cve_2026_11029.py
# Exit codes:
#   0 = PATCHED
#   1 = VULNERABLE
#   2 = UNKNOWN / error

import argparse
import re
import subprocess
import sys

PATCHED = (149, 0, 7827, 53)
PKG = "com.android.chrome"


def parse_version(v):
    m = re.match(r'^(\d+)\.(\d+)\.(\d+)\.(\d+)$', v.strip())
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def cmp_version(a, b):
    return (a > b) - (a < b)


def get_version_from_adb(serial=None):
    cmd = ["adb"]
    if serial:
        cmd += ["-s", serial]
    cmd += ["shell", "dumpsys", "package", PKG]
    try:
        out = subprocess.check_output(cmd, stderr=subprocess.STDOUT, text=True, timeout=20)
    except Exception as e:
        print(f"UNKNOWN: failed to run adb/dumpsys: {e}")
        sys.exit(2)

    for line in out.splitlines():
        if "versionName=" in line:
            ver = line.split("versionName=", 1)[1].strip()
            return ver
    return None


def main():
    ap = argparse.ArgumentParser(description="Check Chrome on Android for CVE-2026-11029")
    ap.add_argument("--version", help="Chrome version string, e.g. 149.0.7827.48")
    ap.add_argument("--adb", action="store_true", help="Query a connected Android device via adb")
    ap.add_argument("--serial", help="ADB device serial to target")
    args = ap.parse_args()

    version = None

    if args.version:
        version = args.version.strip()
    elif args.adb:
        version = get_version_from_adb(args.serial)
        if not version:
            print("UNKNOWN: could not determine Chrome version from adb output")
            sys.exit(2)
    else:
        print("UNKNOWN: provide --version or --adb")
        sys.exit(2)

    parsed = parse_version(version)
    if not parsed:
        print(f"UNKNOWN: unrecognized version format: {version}")
        sys.exit(2)

    if cmp_version(parsed, PATCHED) >= 0:
        print(f"PATCHED: Chrome {version} is >= 149.0.7827.53")
        sys.exit(0)
    else:
        print(f"VULNERABLE: Chrome {version} is < 149.0.7827.53")
        sys.exit(1)


if __name__ == "__main__":
    main()