CVE-2026-59005 | Google Android up to 17 MmsProvider MmsProvider.java insertInternal privileges management

November 2, 2026 Yanac

A vulnerability marked as very critical has been reported in Google Android 14/15/16/16-qpr2/17. This affects the function insertInternal of the file MmsProvider.java of the component MmsProvider. The manipulation leads to improper privilege management.

This vulnerability is documented as CVE-2026-59005. The attack needs to be performed locally. There is not any exploit available.

To fix this issue, it is recommended to deploy a patch.VulDB Recent EntriesRead More