Skip to content
CVE PROGRAM SOURCE RECORD3.6 Low

CVE-2023-44126

Call management - Implicit intents disclose telephony data such as phone numbers, call states, contacts

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
LGE

Description

The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers, contacts info, etc.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LG Electronics LG V60 Thin Q 5G(LMV600VM)

Default version status: unaffected

  • Android 8 to ≤ 13affected

References