Lucene search

K
osvGoogleOSV:ASB-A-218341397
HistoryJun 01, 2022 - 12:00 a.m.

Contact CallSubjectDialog could be used to trick user into running dangerous USSD code

2022-06-0100:00:00
Google
osv.dev
8
contact callsubjectdialog
ussd code
improper input validation
local privilege escalation
user interaction
software

EPSS

0

Percentile

5.1%

In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-218341397