CVE-2024-36064

The NLL com.nll.cb aka ACR Phone application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component...

CVE-2024-36064

The CVE concerns the NLL com.nll.cb (ACR Phone) Android app, up to version 0.330-playStore-NoAccessibility-arm8. The vulnerability is that any installed app with no permissions can trigger a call by sending a crafted intent to the DialerActivity (com.nll.cb.dialer.dialer.DialerActivity), enabling...