In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://source.android.com/docs/security/bulletin/android-17 |
|
History
Wed, 17 Jun 2026 07:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Google
Google android |
|
| Vendors & Products |
Google
Google android |
Wed, 17 Jun 2026 06:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: google_android
Published:
Updated: 2026-06-17T06:03:14.307Z
Reserved: 2025-10-15T15:40:32.998Z
Link: CVE-2026-0057
No data.
No data.
No data.
OpenCVE Enrichment
Updated: 2026-06-17T07:30:04Z
Weaknesses
No weakness.