CVE-2024-36064

Published November 7th, 2024

View on NVD ↗

CVSS v3

6.2

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

The NLL com.nll.cb (aka ACR Phone) application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component.

actuator/com.nll.cb

GitHub