CVE-2024-37573

Published October 30th, 2024

View on NVD ↗

CVSS v3

8.4

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

The Talkatone com.talkatone.android application 8.4.6 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.talkatone.vedroid.ui.launcher.OutgoingCallInterceptor component.

actuator/com.talkatone.android

GitHub