CVE-2023-44127CWE-927

Call management - Implicit activity intents disclose contact details and phone numbers

Low · published September 27, 2023

CVSS v3.1
3.6
EPSS
0%
Percentile
2.6
In the wild
Unconfirmed
What it is

he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as contact details and phone numbers.

The record
Technical detail
CVSS v3.1
3.6 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00133 · 2.6th percentile
Weakness
CWE-927 · Use of Implicit Intent for Sensitive Communication
Published
2023-09-27T14:05Z
EPSS history
Timeline
  • 27 SEP 14:05Z
    Call management - Implicit activity intents disclose contact details and phone numbers
    cvelistv5