VDB
CVE-2023-44126
CVE-2023-44126
PUBLISHED
CVSS 3.5999999046325684 LOW
The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers, contacts info, etc.
EPSS 0.12% · 2.1th percentile
Risk Scores
CVSS 3.1
3.5999999046325684
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
EPSS Score
0.12%
2.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| android | 8.0 | |
| LG Electronics | LG V60 Thin Q 5G(LMV600VM) | Android 8 |
Timeline
- Sep 27, 2023 CVE Published
- Sep 28, 2023 EPSS Score
- Oct 30, 2023 EPSS Score
- Dec 1, 2023 EPSS Score
- Jan 2, 2024 EPSS Score
- Feb 3, 2024 EPSS Score
- Mar 6, 2024 EPSS Score
- Apr 7, 2024 EPSS Score
- May 9, 2024 EPSS Score
- Jun 10, 2024 EPSS Score
- Jul 12, 2024 EPSS Score
- Aug 13, 2024 EPSS Score