CVE-2024-37574

Summary

CVE-2024-37574 is a vulnerability affecting the GriceMobile com.grice.call application version 4.5.2 on Android devices. Maliciously crafted intents can be sent to this app, enabling any installed app without user interaction to place phone calls. This issue poses a significant security risk, as unauthorized call initiation can lead to privacy breaches and potential financial losses. Users are advised to update their GriceMobile call app as soon as the patch is available or consider using alternative, more secure solutions for placing calls on their Android devices.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.