CVE-2023-38293: Improper Input Validation

Certain software builds for the Nokia C200 and Nokia C100 Android devices contain a vulnerable, pre-installed app with a package name of com.tracfone.tfstatus versionCode='31', versionName='12' that allows local third-party apps to execute arbitrary AT commands in its context radio user via AT...

CVE-2023-38293

Certain software builds for Nokia C200 and Nokia C100 Android devices are vulnerable due to a flaw in a pre-installed app (com.tracfone.tfstatus , versionCode='31', versionName='12'). The vulnerability stems from inadequate access control and inadequate input filtering , allowing local third-part...