Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cq9x-f32f-pmw7

Опубликовано: 07 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

The com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: Call Screen Theme) application through 21.1.9 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.remi.colorphone.callscreen.calltheme.callerscreen.dialer.DialerActivity component.

The com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: Call Screen Theme) application through 21.1.9 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.remi.colorphone.callscreen.calltheme.callerscreen.dialer.DialerActivity component.

EPSS

Процентиль: 31%
0.00119
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 9.1
nvd
около 1 года назад

The com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: Call Screen Theme) application through 21.1.9 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.remi.colorphone.callscreen.calltheme.callerscreen.dialer.DialerActivity component.

EPSS

Процентиль: 31%
0.00119
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-732