ASB-A-527424853

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-527424853.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-527424853
Aliases
  • A-527424853
  • CVE-2026-59012
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T16:56:16Z
Summary
[none]
Details

In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/1d9d6602123b07671dffee76f33fe5cd0bc17a08"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "306674361035287974594053603487995668357",
                    "165369911743015966649943538985253055756",
                    "256992432655509678819762335391489586798",
                    "16874414927563164463721853860099032267",
                    "105391709675561677841802656469002537971"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-527424853-5e98aff8",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1d9d6602123b07671dffee76f33fe5cd0bc17a08",
            "target":  {
                "file":  "telephony/common/com/android/internal/telephony/TelephonyPermissions.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "98692593697724841094623870710691137076",
                "length":  150
            },
            "id":  "ASB-A-527424853-6d7e60a6",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1d9d6602123b07671dffee76f33fe5cd0bc17a08",
            "target":  {
                "file":  "telephony/common/com/android/internal/telephony/TelephonyPermissions.java",
                "function":  "checkLastKnownCellIdAccessPermission"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "110760292970965064843437327174775404684",
                    "198874017054235125074658086056121516327",
                    "148432045205926008738327944246036211948",
                    "262529127125152421266209583590579714028",
                    "267631820449031445947734210894762414811",
                    "227649206094644595287006802647384080524",
                    "51399996883436711910576916299094814975"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-527424853-d3bd99f0",
            "match_only_versions":  [
                "17-qpr2-next"
            ],
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1d9d6602123b07671dffee76f33fe5cd0bc17a08",
            "target":  {
                "file":  "telephony/java/android/telephony/TelephonyManager.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-527424853.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-11-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/d1c479cf761fbae207c7418d215949df64c386a4"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "165369911743015966649943538985253055756",
                    "256992432655509678819762335391489586798",
                    "16874414927563164463721853860099032267",
                    "105391709675561677841802656469002537971"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-527424853-86e62ad5",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/d1c479cf761fbae207c7418d215949df64c386a4",
            "target":  {
                "file":  "telephony/common/com/android/internal/telephony/TelephonyPermissions.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "98692593697724841094623870710691137076",
                "length":  150
            },
            "id":  "ASB-A-527424853-9a01e8d3",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/d1c479cf761fbae207c7418d215949df64c386a4",
            "target":  {
                "file":  "telephony/common/com/android/internal/telephony/TelephonyPermissions.java",
                "function":  "checkLastKnownCellIdAccessPermission"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-527424853.json"