CVE-2026-59001 | Google Android up to 17 Telephony Provider TelephonyProvider.java checkQueryPermission privileges management

November 2, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Google Android 14/15/16/16-qpr2/17. This affects the function checkQueryPermission of the file TelephonyProvider.java of the component Telephony Provider. Performing a manipulation results in improper privilege management.

This vulnerability was named CVE-2026-59001. The attack needs to be approached locally. There is no available exploit.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More