Affected Products
| Vendor | Product | Versions |
|---|---|---|
| platform | packages/services/Telecomm | 13-next:0, 13-next, 11:0 |
Timeline
- Jun 1, 2023 CVE Published
- May 15, 2026 CVE Updated
In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for exploitation.
| Vendor | Product | Versions |
|---|---|---|
| platform | packages/services/Telecomm | 13-next:0, 13-next, 11:0 |