PT-2023-28424 · Contacts · Contacts

CVE-2023-42556

Published

2023-12-04

Updated

2023-12-08

CVSS v3.1

5.5

Medium

Vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Contacts versions prior to SMR Dec-2023 Release 1

Description The issue is related to the improper usage of implicit intent in Contacts, which allows an attacker to obtain sensitive information.

Recommendations For versions prior to SMR Dec-2023 Release 1, update to SMR Dec-2023 Release 1 or later to resolve the issue.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2023-42556

Contacts