CVE-2023-29728

The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack

Critical · published May 30, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

🔥 If your phone could suddenly block calls from anyone, including you, that's the chaos brought by CVE-2023-29728! 🚨 Think of it like a hotel that lets anyone change their room keys at will—yikes! A rogue guest could gain access to any room, tampering with sensitive data and disrupting services in the process. This vulnerability allows attackers to elevate their privileges and mess with crucial feature data in the Call Blocker app. This could lead to unauthorized access to sensitive call management functions, putting your privacy at serious risk and turning your trusted app into a tool for malicious activity.

Put simply

Think of it like a hotel that lets anyone change their room keys at will—yikes! A rogue guest could gain access to any room, tampering with sensitive data and disrupting services in the process. CVE-2023-29728 allows attackers to manipulate feature-related data in the Call Blocker application, leading to a severe elevation of privilege. This means an attacker can gain higher permissions to effectively control call management functions.

What to do

This vulnerability allows attackers to elevate their privileges and mess with crucial feature data in the Call Blocker app. This could lead to unauthorized access to sensitive call management functions, putting your privacy at serious risk and turning your trusted app into a tool for malicious activity. Immediately update the Call Blocker application to version 6.6.4 to patch this critical vulnerability. Encourage users to regularly check for app updates and ensure they're running the latest version to avoid any security hiccups. You've got this! With these steps, you can secure your phone and enjoy peace of mind. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00583 · 47.2th percentile
Published
2023-05-30T00:00Z
EPSS history
Timeline
  • 30 MAY 00:00Z
    The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack
    cvelistv5