{"id":"ASB-A-527424853","details":"In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-527424853","CVE-2026-59012"],"modified":"2026-11-02T16:56:16.433715051Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1d9d6602123b07671dffee76f33fe5cd0bc17a08"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1d9d6602123b07671dffee76f33fe5cd0bc17a08","target":{"file":"telephony/common/com/android/internal/telephony/TelephonyPermissions.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["306674361035287974594053603487995668357","165369911743015966649943538985253055756","256992432655509678819762335391489586798","16874414927563164463721853860099032267","105391709675561677841802656469002537971"]},"id":"ASB-A-527424853-5e98aff8","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1d9d6602123b07671dffee76f33fe5cd0bc17a08","target":{"file":"telephony/common/com/android/internal/telephony/TelephonyPermissions.java","function":"checkLastKnownCellIdAccessPermission"},"deprecated":false,"digest":{"function_hash":"98692593697724841094623870710691137076","length":150},"id":"ASB-A-527424853-6d7e60a6"},{"target":{"file":"telephony/java/android/telephony/TelephonyManager.java"},"deprecated":false,"digest":{"line_hashes":["110760292970965064843437327174775404684","198874017054235125074658086056121516327","148432045205926008738327944246036211948","262529127125152421266209583590579714028","267631820449031445947734210894762414811","227649206094644595287006802647384080524","51399996883436711910576916299094814975"],"threshold":0.9},"id":"ASB-A-527424853-d3bd99f0","match_only_versions":["17-qpr2-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1d9d6602123b07671dffee76f33fe5cd0bc17a08"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-527424853.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"id":"ASB-A-527424853-86e62ad5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d1c479cf761fbae207c7418d215949df64c386a4","target":{"file":"telephony/common/com/android/internal/telephony/TelephonyPermissions.java"},"deprecated":false,"digest":{"line_hashes":["165369911743015966649943538985253055756","256992432655509678819762335391489586798","16874414927563164463721853860099032267","105391709675561677841802656469002537971"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d1c479cf761fbae207c7418d215949df64c386a4","target":{"file":"telephony/common/com/android/internal/telephony/TelephonyPermissions.java","function":"checkLastKnownCellIdAccessPermission"},"deprecated":false,"digest":{"length":150,"function_hash":"98692593697724841094623870710691137076"},"id":"ASB-A-527424853-9a01e8d3"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d1c479cf761fbae207c7418d215949df64c386a4"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-527424853.json"}}],"schema_version":"1.9.2"}