CVE-2024-53932

Summary

CVE-2024-53932 is a vulnerability affecting the com.remi.colorphone.callscreen.calltheme.callerscreen (Color Phone: Call Screen Theme) application on Android versions up to 21.1.9. This issue enables any application, without necessary permissions, to initiate phone calls silently by crafting and sending an intent to the com.remi.colorphone.callscreen.calltheme.callerscreen.dialer.DialerActivity component. This vulnerability can lead to unauthorized calls being made without user consent. Attackers can exploit this issue to make calls, potentially resulting in financial loss or other unwanted consequences. Users are advised to update their applications to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.