Skip to content
OpenAdvisories
Medium · 6.2 CVE-2024-36064 EUVD-2024-35866GHSA-px4g-hqp9-pjwc

The NLL com.nll.cb (aka ACR Phone) application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application (w…

Published Nov 7, 2024 · Updated Nov 8, 2024 · Assigned by mitre

Description

The NLL com.nll.cb (aka ACR Phone) application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component.

References