Android Phone Call Screen App Vulnerability Affects Asian Mobile
CVE-2024-53936

6.3MEDIUM

Key Information:

Vendor: Asian Mobile
Status: Color Phone Call Screen App
Vendor: CVE Published:; 6 January 2025

🔔 Create Asian Mobile Vulnerability Alert

What is CVE-2024-53936?

The Color Phone Call Screen App for Android contains a vulnerability that allows unauthorized applications to initiate phone calls without user consent. By exploiting improper handling of intents through the com.asianmobile.callcolor.ui.component.call.CallActivity component, an attacker can send a crafted intent to make calls without requiring any permissions. This could lead to unexpected calls being made, posing a significant risk to user privacy and security.

References

https://github.com/actuator/com.asianmobile.callcolor

https://github.com/actuator/com.asianmobile.callcolor/blo...

CVSS V3.1

Score:

6.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Adjacent Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 6, 2025

CVE-2024-53936 Data

JSON