Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-29726

Опубликовано: 30 мая 2023
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty data into the application's database. When the application starts, it loads the data from the database into memory. Once the attacker injects too much data, the application triggers an OOM error and crashes, resulting in a persistent denial of service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:applika:call_blocker:6.6.3:*:*:*:*:android:*:*

EPSS

Процентиль: 39%
0.00173
Низкий

7.5 High

CVSS3

Дефекты

CWE-404
CWE-404

Связанные уязвимости

CVSS3: 7.5
github
больше 2 лет назад

The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty data into the application's database. When the application starts, it loads the data from the database into memory. Once the attacker injects too much data, the application triggers an OOM error and crashes, resulting in a persistent denial of service.

EPSS

Процентиль: 39%
0.00173
Низкий

7.5 High

CVSS3

Дефекты

CWE-404
CWE-404