CVE-2024-37575

Name of the Vulnerable Software and Affected Versions Mister org.mistergroup.shouldianswer version 1.4.264

Description The issue allows any installed application, without requiring permissions, to initiate phone calls without user interaction. This is achieved by sending a crafted intent via the org.mistergroup.shouldianswer.ui.default dialer.DefaultDialerActivity component.

Recommendations For version 1.4.264, consider restricting access to the org.mistergroup.shouldianswer.ui.default dialer.DefaultDialerActivity component to prevent unauthorized phone calls until a patch is available.