CVE-2023-42469

LOW Year: 2023
CVSS v3 Score
3.3
Low
Weakness Type
CWE-862
View all →

Vulnerability Description

The com.full.dialer.top.secure.encrypted application through 1.0.1 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.full.dialer.top.secure.encrypted.activities.DialerActivity component.

Related Vulnerabilities

CVE-2017-17807

LOW
CVSS:3.3(Low)

The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task's "default request-key keyring" via the request_key() system call, allowing a...

CWE-8622017

CVE-2017-5985

LOW
CVSS:3.3(Low)

lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns own...

CWE-8622017

CVE-2019-15387

LOW
CVSS:3.3(Low)

The Archos Core 101 Android device with a build fingerprint of archos/MTKAC101CR3G_ARCHOS/ac101cr3g:7.0/NRD90M/20180611.034442:user/release-keys contains a pre-installed app with a package name of com...

CWE-8622019

CVE-2019-17055

LOW
CVSS:3.3(Low)

base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socke...

CWE-8622019

CVE-2019-9351

LOW
CVSS:3.3(Low)

In SyncStatusObserver, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission check. This could lead to local limited inform...

CWE-8622019

CVE-2019-9377

LOW
CVSS:3.3(Low)

In FingerprintService, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission check. This could lead to a local information ...

CWE-8622019