CVE-2024-36437

The com.enflick.android.TextNow aka TextNow: Call + Text Unlimited application 24.17.0.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.enflick.android.TextNow.activities.DialerActivity...

CVE-2024-53934

The com.windymob.callscreen.ringtone.callcolor.colorphone (also known as Color Phone Call Screen Themes ) application for Android , version 1.1.2 and earlier, is vulnerable to unauthorized call placement. The root cause is an improper preservation of permissions, where any application (even those...