Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5hp7-929x-xgf8

Опубликовано: 07 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

The com.callerscreen.colorphone.themes.callflash (aka Color Call Theme & Call Screen) application through 1.0.7 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.android.call.color.app.activities.DialerActivity component.

The com.callerscreen.colorphone.themes.callflash (aka Color Call Theme & Call Screen) application through 1.0.7 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.android.call.color.app.activities.DialerActivity component.

EPSS

Процентиль: 18%
0.00056
Низкий

6.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.3
nvd
около 1 года назад

The com.callerscreen.colorphone.themes.callflash (aka Color Call Theme & Call Screen) application through 1.0.7 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.android.call.color.app.activities.DialerActivity component.

EPSS

Процентиль: 18%
0.00056
Низкий

6.3 Medium

CVSS3