Description
GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi-Fi network.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | gramaddict | < 1.2.5 | 1.2.5 | GHSA-q5h6-49gg-2wfg |
| PyPI | gramaddict | < 1.2.4 | 1.2.4 | PYSEC-2021-65 |