ASB-A-527424853: Android/platform/frameworks/base vulnerability

Q: What level of access does an attacker need to exploit this issue?

The issue can be exploited locally and does not require additional execution privileges. No user interaction is needed.

Q: What is the potential impact of successful exploitation?

Successful exploitation could disclose information locally through a permission bypass in the telephony permission-checking logic.

Published Nov 1, 2026

Updated

In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

2 affected componentsFixes available

android/platform/frameworks/base>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/frameworks/base>=14:0<14:2026-11-01

14:2026-11-01

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue can be exploited locally and does not require additional execution privileges. No user interaction is needed.

What is the potential impact of successful exploitation?

Successful exploitation could disclose information locally through a permission bypass in the telephony permission-checking logic.

ASB-A-527424853: Android/platform/frameworks/base vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?