Skip to content
OpenAdvisories
Low · 3.6 CVE-2023-44126 EUVD-2023-48485GHSA-6rmr-m77c-mfqc

Call management - Implicit intents disclose telephony data such as phone numbers, call states, contacts

Published Sep 27, 2023 · Updated Sep 20, 2024 · Assigned by LGE

Description

The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers, contacts info, etc.

Affected products

VendorProductAffectedFixed
LG Electronics LG V60 Thin Q 5G(LMV600VM) Android 8 – ≤ 13 —

References