CVE-2023-42468

creationtimestamp| type| source ---|---|--- 2023-09-14 00:23:53+00:00| seen| https://t.me/cibsecurity/70421 2023-11-11 14:10:38+00:00| seen| https://t.me/GithubRedTeam/5766...

CVE-2023-42468

The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application without any permissions can craft an...

CVE-2023-42468

CVE-2023-42468 affects the Android app com.cutestudio.colordialer (versions up to 2.1.8-2). The vulnerability stems from an improperly exported DialerActivity, allowing a remote attacker to initiate phone calls without user consent by crafting an android.intent.action.CALL intent with a tel: URI ...