{"id":"CVE-2026-59003","kind":"vulnerability","aliases":["CVE-2026-59003"],"related":[],"title":"Android: missing permission check in subscription manager leaks local information","description":"In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"A missing permission check in the Android SubscriptionManagerService getSubscriptionProperty method lets an app on the same device read subscription information it should not see. The sources describe local information disclosure only, with no extra execution privileges and no user interaction needed.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","mobile","runtime","telephony"],"not_affected_if":["patched-android-build"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T20:17:55+00:00","first_seen_at":"2026-11-02T20:35:36+00:00","triaged_at":"2026-11-02T20:37:04+00:00","updated_at":"2026-11-02T20:37:04+00:00","category":"runtime","confidence":0.4,"triage":{"at":"2026-11-02T20:37:04Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android: missing permission check in subscription manager leaks local information","impact":"low","summary":"A missing permission check in the Android SubscriptionManagerService getSubscriptionProperty method lets an app on the same device read subscription information it should not see. The sources describe local information disclosure only, with no extra execution privileges and no user interaction needed.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["android","mobile","telephony"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"local apps read subscription information without permission","analyst_note":"Find the affected Android versions and the patch level that fixes CVE-2026-59003 in the Android Security Bulletin, since the NVD entry gives none.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":["patched-android-build"],"who_is_affected":"The sources describe a local flaw in Android's telephony subscription service, which affects devices running the vulnerable Android builds. They do not name the affected Android versions or patch levels, so check your device's security patch level in Settings and install pending system updates. Systems that cannot receive Android updates may remain exposed.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000643,"input_tokens":4100,"output_tokens":467,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-59003':13A,16A 'addit':87C 'android':1A,17B,27B 'app':33B 'check':4A,24B,77C 'could':79C 'cve':11A,14A 'describ':47B 'devic':37B 'disclosur':50B,71C,84C 'due':72C 'execut':55B,88C 'exploit':97C 'extra':54B 'getsubscriptionproperti':29B,63C 'inform':10A,40B,49B,70C,83C 'interact':60B,92C 'lead':80C 'leak':8A 'let':31B 'local':9A,48B,82C 'manag':7A 'method':30B 'miss':2A,22B,75C 'mobil':18B 'need':61B,90C,95C 'permiss':3A,23B,76C 'possibl':69C 'privileg':56B,89C 'read':38B 'runtim':19B 'see':44B 'sourc':46B 'subscript':6A,39B 'subscriptionmanagerservic':28B 'subscriptionmanagerservice.java':65C 'telephoni':20B 'user':59B,91C","nicknames":[],"mitigations":[],"who_affected":"The sources describe a local flaw in Android's telephony subscription service, which affects devices running the vulnerable Android builds. They do not name the affected Android versions or patch levels, so check your device's security patch level in Settings and install pending system updates. Systems that cannot receive Android updates may remain exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["android","mobile","runtime","telephony","unknown"],"first_public_at":"2026-11-02T20:17:55+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-59003","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59003","severity":null,"published_at":"2026-11-02T20:17:55+00:00","modified_at":"2026-11-02T20:17:55+00:00","first_seen_at":"2026-11-02T20:35:36+00:00","fetched_at":"2026-11-02T20:35:36+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}