CVE-2024-36064: Improper Neutralization of Input During Web Page Generation

The NLL com.nll.cb aka ACR Phone application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component...

PT-2024-26876

Name of the Vulnerable Software and Affected Versions com.nll.cb aka ACR Phone versions 0.330-playStore-NoAccessibility-arm8 and earlier Description The issue allows any installed application, without requiring permissions, to place phone calls without user interaction. This is achieved by sendin...