{"id":"ASB-A-515391495","details":"In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-515391495","CVE-2026-59003"],"modified":"2026-11-02T17:11:16.304882148Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/8290e21f121659600f7d1ebb5d4023a5a20fe4db"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/8290e21f121659600f7d1ebb5d4023a5a20fe4db","target":{"file":"src/java/com/android/internal/telephony/subscription/SubscriptionManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["246215676984718597569902176265672637491","206717048668306286442425831194883976614","19246540623645603650631512277413682331","71622466269743626912304787010695159175"]},"id":"ASB-A-515391495-258ae26f","signature_type":"Line"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515391495.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/1be7bc5f6bf6c857a9f5a6089338e98b3515cd68","target":{"file":"src/java/com/android/internal/telephony/subscription/SubscriptionManagerService.java"},"deprecated":false,"digest":{"line_hashes":["246215676984718597569902176265672637491","206717048668306286442425831194883976614","19246540623645603650631512277413682331","71622466269743626912304787010695159175"],"threshold":0.9},"id":"ASB-A-515391495-8aa29f92","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/1be7bc5f6bf6c857a9f5a6089338e98b3515cd68"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515391495.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["246215676984718597569902176265672637491","206717048668306286442425831194883976614","19246540623645603650631512277413682331","71622466269743626912304787010695159175"],"threshold":0.9},"id":"ASB-A-515391495-9b6c672e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/49b639dd1d6085c1f9a5ce26dbc721dcf66b97e7","target":{"file":"src/java/com/android/internal/telephony/subscription/SubscriptionManagerService.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/49b639dd1d6085c1f9a5ce26dbc721dcf66b97e7"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515391495.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["246215676984718597569902176265672637491","206717048668306286442425831194883976614","19246540623645603650631512277413682331","71622466269743626912304787010695159175"]},"id":"ASB-A-515391495-e72890c5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/2aa4be741f45de865e6e16eb5d51070a39fe8efc","target":{"file":"src/java/com/android/internal/telephony/subscription/SubscriptionManagerService.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/2aa4be741f45de865e6e16eb5d51070a39fe8efc"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515391495.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/47631dc443a8d6d8ae40ffa73413061e0ad7cadc"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["246215676984718597569902176265672637491","206717048668306286442425831194883976614","19246540623645603650631512277413682331","71622466269743626912304787010695159175"]},"id":"ASB-A-515391495-57bd7405","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/47631dc443a8d6d8ae40ffa73413061e0ad7cadc","target":{"file":"src/java/com/android/internal/telephony/subscription/SubscriptionManagerService.java"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515391495.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/8e7b22e649969cad18034d24c0cb3bcc027029c2","target":{"file":"src/java/com/android/internal/telephony/subscription/SubscriptionManagerService.java"},"deprecated":false,"digest":{"line_hashes":["246215676984718597569902176265672637491","206717048668306286442425831194883976614","19246540623645603650631512277413682331","71622466269743626912304787010695159175"],"threshold":0.9},"id":"ASB-A-515391495-a5fd292d","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/8e7b22e649969cad18034d24c0cb3bcc027029c2"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515391495.json"}}],"schema_version":"1.9.2"}