Local Information Disclosure Vulnerability in Subscription Manager Service by Android

CVE-2026-59003

What is CVE-2026-59003?

The SubscriptionManagerService in Android has a security flaw that allows for potential local information disclosure due to missing permission checks. This vulnerability, identified in the getSubscriptionProperty method, does not require any user interaction or elevated execution privileges for exploitation, making it particularly concerning for security. It highlights the importance of thorough permission validations in application services to prevent unauthorized access to sensitive information.

References