Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2024-52197 | The com.callos14.callscreen.colorphone (aka iCall OS17 - Color Phone Flash) application through 4.3 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.callos14.callscreen.colorphone.DialerActivity component. |
Tue, 07 Jan 2025 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Mon, 06 Jan 2025 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The com.callos14.callscreen.colorphone (aka iCall OS17 - Color Phone Flash) application through 4.3 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.callos14.callscreen.colorphone.DialerActivity component. | |
| References |
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-01-07T21:37:44.800Z
Reserved: 2024-11-25T00:00:00.000Z
Link: CVE-2024-53935
Updated: 2025-01-07T21:37:38.617Z
Status : Deferred
Published: 2025-01-06T22:15:10.520
Modified: 2026-04-15T00:35:42.020
Link: CVE-2024-53935
No data.
OpenCVE Enrichment
No data.
No weakness.
EUVD