CVE-2024-53933
CVSS 3.1 Score 6.3 of 10 (medium)
Details
Published Jan 6, 2025
Updated: Jan 8, 2025
Summary
CVE-2024-53933 is a vulnerability affecting the com.callerscreen.colorphone.themes.callflash app, specifically versions prior to 1.0.8. This issue allows any application, without requiring user interaction or explicit permissions, to initiate phone calls by sending a crafted intent to the com.android.call.color.app.activities.DialerActivity component within the vulnerable app. This flaw poses a significant risk to Android users, potentially enabling unauthorized call making and resulting in unwanted charges or privacy violations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.