VulnerabilityModified
CVE-2023-42469
The com.full.dialer.top.secure.encrypted application through 1.0.1 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the…
LOW 3.3EPSS 0.31%
Does this matter?
Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.
Description
The com.full.dialer.top.secure.encrypted application through 1.0.1 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.full.dialer.top.secure.encrypted.activities.DialerActivity component.
- CVSS 3.1
- 3.3 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- EPSS
- 0.31% probability · 23th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-862
- Affected
- fulldive/full dialer
- Source
- cve@mitre.org
References
- https://github.com/actuator/com.full.dialer.top.secure.encryptedExploit
- https://github.com/actuator/com.full.dialer.top.secure.encrypted/blob/main/dial.gifExploit
- https://github.com/actuator/com.full.dialer.top.secure.encrypted/blob/main/poc.apkExploit
- https://github.com/actuator/cve/blob/main/CVE-2023-42469Third Party Advisory
- https://github.com/actuator/com.full.dialer.top.secure.encryptedExploit
- https://github.com/actuator/com.full.dialer.top.secure.encrypted/blob/main/dial.gifExploit
- https://github.com/actuator/com.full.dialer.top.secure.encrypted/blob/main/poc.apkExploit
- https://github.com/actuator/cve/blob/main/CVE-2023-42469Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.