{"id":"ASB-A-515391495", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-02T16:38:00.081625681Z", "aliases":["CVE-2026-59003", "A-515391495"], "details":"In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/opt/telephony", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/8290e21f121659600f7d1ebb5d4023a5a20fe4db"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["246215676984718597569902176265672637491", "206717048668306286442425831194883976614", "19246540623645603650631512277413682331", "71622466269743626912304787010695159175"], "threshold":0.9}, "id":"ASB-A-515391495-258ae26f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/8290e21f121659600f7d1ebb5d4023a5a20fe4db", "target":{"file":"src/java/com/android/internal/telephony/subscription/SubscriptionManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/opt/telephony", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/1be7bc5f6bf6c857a9f5a6089338e98b3515cd68"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["246215676984718597569902176265672637491", "206717048668306286442425831194883976614", "19246540623645603650631512277413682331", "71622466269743626912304787010695159175"], "threshold":0.9}, "id":"ASB-A-515391495-8aa29f92", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/1be7bc5f6bf6c857a9f5a6089338e98b3515cd68", "target":{"file":"src/java/com/android/internal/telephony/subscription/SubscriptionManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/opt/telephony", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/49b639dd1d6085c1f9a5ce26dbc721dcf66b97e7"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["246215676984718597569902176265672637491", "206717048668306286442425831194883976614", "19246540623645603650631512277413682331", "71622466269743626912304787010695159175"], "threshold":0.9}, "id":"ASB-A-515391495-9b6c672e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/49b639dd1d6085c1f9a5ce26dbc721dcf66b97e7", "target":{"file":"src/java/com/android/internal/telephony/subscription/SubscriptionManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/opt/telephony", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/2aa4be741f45de865e6e16eb5d51070a39fe8efc"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["246215676984718597569902176265672637491", "206717048668306286442425831194883976614", "19246540623645603650631512277413682331", "71622466269743626912304787010695159175"], "threshold":0.9}, "id":"ASB-A-515391495-e72890c5", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/2aa4be741f45de865e6e16eb5d51070a39fe8efc", "target":{"file":"src/java/com/android/internal/telephony/subscription/SubscriptionManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/opt/telephony", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/47631dc443a8d6d8ae40ffa73413061e0ad7cadc"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["246215676984718597569902176265672637491", "206717048668306286442425831194883976614", "19246540623645603650631512277413682331", "71622466269743626912304787010695159175"], "threshold":0.9}, "id":"ASB-A-515391495-57bd7405", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/47631dc443a8d6d8ae40ffa73413061e0ad7cadc", "target":{"file":"src/java/com/android/internal/telephony/subscription/SubscriptionManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/opt/telephony", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/8e7b22e649969cad18034d24c0cb3bcc027029c2"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["246215676984718597569902176265672637491", "206717048668306286442425831194883976614", "19246540623645603650631512277413682331", "71622466269743626912304787010695159175"], "threshold":0.9}, "id":"ASB-A-515391495-a5fd292d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/8e7b22e649969cad18034d24c0cb3bcc027029c2", "target":{"file":"src/java/com/android/internal/telephony/subscription/SubscriptionManagerService.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}