319 matches found
PT-2023-28540 · Dialer · Dialer
Name of the Vulnerable Software and Affected Versions: Dialer affected versions not specified Description: The issue is related to a missing permission check in the dialer, which could allow writing permission usage records of an app. This could lead to local information disclosure without...
CVE-2023-40631
In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed...
CVE-2023-40631
In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed...
Information disclosure
In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed...
CVE-2023-40631
No public technical details are provided in the supplied documents for CVE-2023-40631 beyond the description of a missing permission check in Dialer causing local information disclosure; monitor for updates.
CVE-2023-40631
In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed...
CVE-2023-40631
In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed...
UNISOC Chipsets Security Vulnerability
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of permission checking in Dialer. An attacker could exploit the vulnerability to cause information leakage...
PT-2023-27552 · Dialer · Dialer
Name of the Vulnerable Software and Affected Versions: Dialer affected versions not specified Description: The issue is related to a possible missing permission check in Dialer, which could lead to local information disclosure. This requires System execution privileges. Recommendations: At the...
CVE-2023-42468
The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application without any permissions can craft an...
CVE-2023-42468
The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application without any permissions can craft an...
CVE-2023-42469
The com.full.dialer.top.secure.encrypted application through 1.0.1 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.full.dialer.top.secure.encrypted.activities.DialerActivity component...
CVE-2023-42469
The com.full.dialer.top.secure.encrypted application through 1.0.1 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.full.dialer.top.secure.encrypted.activities.DialerActivity component...
com.full.dialer.top.secure.crypted security vulnerability
com.full.dialer.top.secure.crypted is a library by actuator personal developer. A security vulnerability exists in com.full.dialer.top.secure.crypted 1.0.1 and earlier versions, which stems from allowing any installed application to make a phone call by sending a crafted intent...
PT-2023-28358 · Unknown · Com.Cutestudio.Colordialer
Name of the Vulnerable Software and Affected Versions: com.cutestudio.colordialer versions 2.1.8-2 and earlier Description: The issue allows a remote attacker to initiate phone calls without user consent due to improper export of the com.cutestudio.dialer.activities.DialerActivity component. A...
CVE-2023-30865
In dialer service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-30865
In dialer service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2022-48441
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges...