Vulnerabilities > CVE-2023-42469 - Missing Authorization vulnerability in Fulldive Full Dialer 1.0.1
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
LOW Availability impact
NONE Summary
The com.full.dialer.top.secure.encrypted application through 1.0.1 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.full.dialer.top.secure.encrypted.activities.DialerActivity component.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |