PT-2026-50229 · Google · Android

CVE-2026-0063

·

Published

2026-06-17

·

Updated

2026-06-18

CVSS v4.0

10

Critical

VectorAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions Android versions prior to June 2026
Description A logic error in the setAllowedCarriers function within PhoneInterfaceManager.java allows for the disabling of carrier restrictions. This flaw can lead to local escalation of privilege without requiring additional execution privileges or user interaction.
Recommendations Update to the June 2026 Android Security Bulletin version.

Fix

LPE

Improper Privilege Management

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-0063

Affected Products

Android