CVE-2024-53936

The com.asianmobile.callcolor aka Color Phone Call Screen App application through 24 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component...

PT-2025-2408 · Qualcomm · Snapdragon +36

Name of the Vulnerable Software and Affected Versions: No specific software or affected versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when invoking IOCTL calls to unmap DMA buffers. This can lead to memory corruption. No...

PT-2025-2998 · Unknown · Com.Glitter.Caller.Screen

Name of the Vulnerable Software and Affected Versions: com.glitter.caller.screen versions 1.1 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the com.glitter.caller.screen.DialerActivity component. This enable...

CVE-2024-53931

The CVE-2024-53931 issue affects the Android app com.glitter.caller.screen (aka iCaller, Caller Theme & Dialer) up to version 1.1. The vulnerability arises from a crafted Intent targeting com.glitter.caller.screen.DialerActivity that allows any application (no permissions required) to place phone...

CVE-2024-53933

The com.callerscreen.colorphone.themes.callflash aka Color Call Theme & Call Screen application through 1.0.7 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53933

The com.callerscreen.colorphone.themes.callflash aka Color Call Theme & Call Screen application through 1.0.7 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

PT-2025-2999 · Unknown · Com.Remi.Colorphone.Callscreen.Calltheme.Callerscreen

Name of the Vulnerable Software and Affected Versions: com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme versions through 21.1.9 for Android Description: The issue allows any application to place phone calls without user interaction by sending a crafted inte...

CVE-2024-53932

The com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme application through 21.1.9 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53933

CVE-2024-53933 affects the Android app com.callerscreen.colorphone.themes.callflash (aka Color Call Theme & Call Screen) up to version 1.0.7. The flaw allows any application (no permissions required) to initiate phone calls without user interaction by sending a crafted intent to the DialerActivit...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated Qualcomm. An input validation error vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when calling any IOCTL-calling application that executes all MCDM driver IOCTL calls...

PT-2025-2705 · Unknown · Mcdm Driver

Name of the Vulnerable Software and Affected Versions: MCDM driver affected versions not specified Description: Memory corruption occurs when invoking any application that calls IOCTL and executes all MCDM driver IOCTL calls. This issue arises due to the invocation of any IOCTL-calling applicatio...

PT-2025-3003 · Asianmobile · Com.Asianmobile.Callcolor

Name of the Vulnerable Software and Affected Versions: com.asianmobile.callcolor aka Color Phone Call Screen App version 24 for Android Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53936

The CVE-2024-53936 issue affects the Android app com.asianmobile.callcolor (Color Phone Call Screen App) up to version 24. The vulnerability arises from the CallActivity component, which can be invoked via a crafted intent by any application with no permissions, enabling unauthorized phone calls ...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an information leak when handling IOCTL calls that are used to free a trusted VM process or open a channel without initializing the process...

PT-2025-3002 · Unknown · Com.Callos14.Callscreen.Colorphone

Name of the Vulnerable Software and Affected Versions: com.callos14.callscreen.colorphone also known as iCall OS17 - Color Phone Flash versions 4.3 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53934

The CVE-2024-53934 issue affects the Color Phone Call Screen Themes app (com.windymob.callscreen.ringtone.callcolor.colorphone) up to version 1.1.2 for Android. A crafted intent to the DialerActivity component (com.frovis.androidbase.call.DialerActivity) enables any other app, with no permissions...

PT-2025-2702 · Qualcomm · Snapdragon +9

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption during the processing of FIPS encryption or decryption IOCTL calls invoked from user-space. This can lead to...

PT-2025-3001 · Unknown · Com.Windymob.Callscreen.Ringtone.Callcolor.Colorphone +1

Name of the Vulnerable Software and Affected Versions: com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes versions 1.1.2 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via th...

CVE-2024-53931

The com.glitter.caller.screen aka iCaller, Caller Theme & Dialer application through 1.1 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.glitter.caller.screen.DialerActivity component...

PT-2026-4948

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.1.1 through 3.6 OpenSSL version 1.0.2 is not affected Description The issue relates to the handling of non-block-aligned input lengths when using the low-level OCB API directly with AES-NI or other hardware-accelerated code...