{"id":"ASB-A-527424853", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-59012", "A-527424853"], "details":"In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1d9d6602123b07671dffee76f33fe5cd0bc17a08"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["306674361035287974594053603487995668357", "165369911743015966649943538985253055756", "256992432655509678819762335391489586798", "16874414927563164463721853860099032267", "105391709675561677841802656469002537971"], "threshold":0.9}, "id":"ASB-A-527424853-5e98aff8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1d9d6602123b07671dffee76f33fe5cd0bc17a08", "target":{"file":"telephony/common/com/android/internal/telephony/TelephonyPermissions.java"}}, {"deprecated":false, "digest":{"function_hash":"98692593697724841094623870710691137076", "length":150}, "id":"ASB-A-527424853-6d7e60a6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1d9d6602123b07671dffee76f33fe5cd0bc17a08", "target":{"file":"telephony/common/com/android/internal/telephony/TelephonyPermissions.java", "function":"checkLastKnownCellIdAccessPermission"}}, {"deprecated":false, "digest":{"line_hashes":["110760292970965064843437327174775404684", "198874017054235125074658086056121516327", "148432045205926008738327944246036211948", "262529127125152421266209583590579714028", "267631820449031445947734210894762414811", "227649206094644595287006802647384080524", "51399996883436711910576916299094814975"], "threshold":0.9}, "id":"ASB-A-527424853-d3bd99f0", "match_only_versions":["17-qpr2-next"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1d9d6602123b07671dffee76f33fe5cd0bc17a08", "target":{"file":"telephony/java/android/telephony/TelephonyManager.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d1c479cf761fbae207c7418d215949df64c386a4"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["165369911743015966649943538985253055756", "256992432655509678819762335391489586798", "16874414927563164463721853860099032267", "105391709675561677841802656469002537971"], "threshold":0.9}, "id":"ASB-A-527424853-86e62ad5", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d1c479cf761fbae207c7418d215949df64c386a4", "target":{"file":"telephony/common/com/android/internal/telephony/TelephonyPermissions.java"}}, {"deprecated":false, "digest":{"function_hash":"98692593697724841094623870710691137076", "length":150}, "id":"ASB-A-527424853-9a01e8d3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d1c479cf761fbae207c7418d215949df64c386a4", "target":{"file":"telephony/common/com/android/internal/telephony/TelephonyPermissions.java", "function":"checkLastKnownCellIdAccessPermission"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}