CVE-2023-42469

Name of the Vulnerable Software and Affected Versions com.full.dialer.top.secure.encrypted application version 1.0.1

Description The issue allows any installed application, without requiring permissions, to place phone calls without user interaction. This is achieved by sending a crafted intent via the com.full.dialer.top.secure.encrypted.activities.DialerActivity component.

Recommendations For version 1.0.1, consider restricting access to the com.full.dialer.top.secure.encrypted.activities.DialerActivity component to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.