ASB-A-496454250

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-496454250.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-496454250
Aliases
  • A-496454250
  • CVE-2026-58976
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T17:11:09Z
Summary
[none]
Details

In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/providers/TelephonyProvider

Package

Name
platform/packages/providers/TelephonyProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/14567ebd50eb068cb1e2b531a4f924440832ac5a"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "272509665014026114980560358686056544751",
                    "199189161198573969604473692238282238377",
                    "37994697227110651280769943569499720689",
                    "83361205433726812878618000842647868593",
                    "113154801669694426143828951838839056939",
                    "67893192979168687741649522275965851833",
                    "108981248413832129325679728130689691615",
                    "311106853950227969222065929936895528124",
                    "25610911969201805879596838300332522655"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-496454250-8a2ec798",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/14567ebd50eb068cb1e2b531a4f924440832ac5a",
            "target":  {
                "file":  "src/com/android/providers/telephony/ProviderUtil.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "225802028454404541150552831961267769994",
                "length":  1373
            },
            "id":  "ASB-A-496454250-d9dc0a8f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/14567ebd50eb068cb1e2b531a4f924440832ac5a",
            "target":  {
                "file":  "src/com/android/providers/telephony/ProviderUtil.java",
                "function":  "getSelectionBySubIds"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-496454250.json"
platform/packages/providers/TelephonyProvider

Package

Name
platform/packages/providers/TelephonyProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/ca17ed10c9d48b192f193fdd5bd6e75bf0e8c433"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "272509665014026114980560358686056544751",
                    "199189161198573969604473692238282238377",
                    "37994697227110651280769943569499720689",
                    "83361205433726812878618000842647868593",
                    "113154801669694426143828951838839056939",
                    "67893192979168687741649522275965851833",
                    "108981248413832129325679728130689691615",
                    "311106853950227969222065929936895528124",
                    "25610911969201805879596838300332522655"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-496454250-555dc613",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/ca17ed10c9d48b192f193fdd5bd6e75bf0e8c433",
            "target":  {
                "file":  "src/com/android/providers/telephony/ProviderUtil.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "148401145251030299844321148441954354052",
                "length":  1289
            },
            "id":  "ASB-A-496454250-583d1bbf",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/ca17ed10c9d48b192f193fdd5bd6e75bf0e8c433",
            "target":  {
                "file":  "src/com/android/providers/telephony/ProviderUtil.java",
                "function":  "getSelectionBySubIds"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-496454250.json"
platform/packages/providers/TelephonyProvider

Package

Name
platform/packages/providers/TelephonyProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/00b018673971434214d4b9a4b5acca06853c62e3"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "272509665014026114980560358686056544751",
                    "199189161198573969604473692238282238377",
                    "37994697227110651280769943569499720689",
                    "83361205433726812878618000842647868593",
                    "113154801669694426143828951838839056939",
                    "67893192979168687741649522275965851833",
                    "108981248413832129325679728130689691615",
                    "311106853950227969222065929936895528124",
                    "25610911969201805879596838300332522655"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-496454250-3a85bb04",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/00b018673971434214d4b9a4b5acca06853c62e3",
            "target":  {
                "file":  "src/com/android/providers/telephony/ProviderUtil.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "148401145251030299844321148441954354052",
                "length":  1289
            },
            "id":  "ASB-A-496454250-4eb5218b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/00b018673971434214d4b9a4b5acca06853c62e3",
            "target":  {
                "file":  "src/com/android/providers/telephony/ProviderUtil.java",
                "function":  "getSelectionBySubIds"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-496454250.json"
platform/packages/providers/TelephonyProvider

Package

Name
platform/packages/providers/TelephonyProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/a5400b334de0643cac7931310ee18ff03657e536"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "272509665014026114980560358686056544751",
                    "199189161198573969604473692238282238377",
                    "37994697227110651280769943569499720689",
                    "83361205433726812878618000842647868593",
                    "113154801669694426143828951838839056939",
                    "67893192979168687741649522275965851833",
                    "108981248413832129325679728130689691615",
                    "311106853950227969222065929936895528124",
                    "25610911969201805879596838300332522655"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-496454250-a5e4ed35",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/a5400b334de0643cac7931310ee18ff03657e536",
            "target":  {
                "file":  "src/com/android/providers/telephony/ProviderUtil.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "148401145251030299844321148441954354052",
                "length":  1289
            },
            "id":  "ASB-A-496454250-d0efab87",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/a5400b334de0643cac7931310ee18ff03657e536",
            "target":  {
                "file":  "src/com/android/providers/telephony/ProviderUtil.java",
                "function":  "getSelectionBySubIds"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-496454250.json"
platform/packages/providers/TelephonyProvider

Package

Name
platform/packages/providers/TelephonyProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6af54b00a2d48c4d49564a4058d045d3726c2628"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "225802028454404541150552831961267769994",
                "length":  1373
            },
            "id":  "ASB-A-496454250-c2cb1eb5",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6af54b00a2d48c4d49564a4058d045d3726c2628",
            "target":  {
                "file":  "src/com/android/providers/telephony/ProviderUtil.java",
                "function":  "getSelectionBySubIds"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "272509665014026114980560358686056544751",
                    "199189161198573969604473692238282238377",
                    "37994697227110651280769943569499720689",
                    "83361205433726812878618000842647868593",
                    "113154801669694426143828951838839056939",
                    "67893192979168687741649522275965851833",
                    "108981248413832129325679728130689691615",
                    "311106853950227969222065929936895528124",
                    "25610911969201805879596838300332522655"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-496454250-e70e26de",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6af54b00a2d48c4d49564a4058d045d3726c2628",
            "target":  {
                "file":  "src/com/android/providers/telephony/ProviderUtil.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-496454250.json"