CVE-2024-53934

Summary

CVE-2024-53934 is a vulnerability affecting the com.windymob.callscreen.ringtone.callcolor.colorphone app for Android. This issue allows any application to place phone calls without user interaction. The vulnerability is caused by a flaw in the com.frovis.androidbase.call.DialerActivity component, which can be exploited through a specially crafted intent. An attacker could potentially use this vulnerability to make unauthorized calls, posing a significant risk to user privacy and security. Users are advised to update the affected app to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.