4 matches found
PT-2024-37861
Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue is related to improper permission control in the mobile application, specifically in the com.android.server.telecom component, which may lead to user information security...
CVE-2024-6780: Incorrect Permission Assignment for Critical Resource
Improper permission control in the mobile application com.android.server.telecom may lead to user information security risks...
CVE-2023-44127: Use of Implicit Intent for Sensitive Communication
he vulnerability is that the Call management "com.android.server.telecom" app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as contact details and phone numbers...
CVE-2023-44126: Improper Verification of Intent by Broadcast Receiver
The vulnerability is that the Call management "com.android.server.telecom" app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers,...