Lucene search
+L

4 matches found

Positive Technologies
Positive Technologies
•added 2024/07/16 12:00 a.m.•16 views

PT-2024-37861

Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue is related to improper permission control in the mobile application, specifically in the com.android.server.telecom component, which may lead to user information security...

3.3CVSS5.8AI score0.00173EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/16 12:00 a.m.•5 views

CVE-2024-6780: Incorrect Permission Assignment for Critical Resource

Improper permission control in the mobile application com.android.server.telecom may lead to user information security risks...

3.3CVSS5.8AI score0.00173EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/27 12:00 a.m.•7 views

CVE-2023-44127: Use of Implicit Intent for Sensitive Communication

he vulnerability is that the Call management "com.android.server.telecom" app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as contact details and phone numbers...

5.5CVSS5.9AI score0.00133EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/27 12:00 a.m.•8 views

CVE-2023-44126: Improper Verification of Intent by Broadcast Receiver

The vulnerability is that the Call management "com.android.server.telecom" app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers,...

5.5CVSS6AI score0.00133EPSS
SaveExploits0References2
Rows per page
Query Builder