CVE-2024-36064

The NLL com.nll.cb (aka ACR Phone) application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component.

Score

CVSS 3.1 6.2 Medium

Status

Deferred - cve@mitre.org

Published

2024-11-07

Last modified

2024-11-08

Weaknesses

CWE-79

Affected products

• Acr Phone (Nllcom)

References

• https://github.com/actuator/com.nll.cb/blob/main/CVE-2024-36064