CVE-2023-44127 — Call management - Implicit activity intents disclose contact details and phone numbers

CVE-2023-44127

Call management - Implicit activity intents disclose contact details and phone numbers PUBLISHED

Description (CNA)

he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as contact details and phone numbers.

Affected (CNA)

Vendor / product	Versions
LG Electronics / LG V60 Thin Q 5G(LMV600VM)	affected Android 8 through 13

CWE

CWE-927

References

https://lgsecurity.lge.com/bulletins/mobile#updateDetails

ADP enrichment

CVE

No English description supplied.

https://lgsecurity.lge.com/bulletins/mobile#updateDetails

CISA-ADP

No English description supplied.

No references supplied.