Skip to content
CVE PROGRAM SOURCE RECORD3.6 Low

CVE-2023-44127

Call management - Implicit activity intents disclose contact details and phone numbers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
LGE

Description

he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as contact details and phone numbers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LG Electronics LG V60 Thin Q 5G(LMV600VM)

Default version status: unaffected

  • Android 8 to ≤ 13affected

References