Skip to content
OpenAdvisories
Low · 3.6 CVE-2023-44127 EUVD-2023-48486GHSA-cv9c-m43f-27cv

Call management - Implicit activity intents disclose contact details and phone numbers

Published Sep 27, 2023 · Updated Sep 20, 2024 · Assigned by LGE

Description

he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as contact details and phone numbers.

Affected products

VendorProductAffectedFixed
LG Electronics LG V60 Thin Q 5G(LMV600VM) Android 8 – ≤ 13 —

References