Local Information Disclosure Vulnerability in TelephonyProvider by Android

CVE-2026-59001

What is CVE-2026-59001?

A vulnerability exists in the TelephonyProvider component of Android, where a logic error in the 'checkQueryPermission' method can lead to a local information disclosure. This flaw permits unauthorized access to sensitive information without any need for elevated execution privileges or user interaction to exploit. Such vulnerabilities pose a significant risk to user data integrity and privacy, highlighting the importance of ongoing security audits and timely updates to the affected systems.

References