CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.6. It affects Android.
CVE
CVE-2023-44126
Severity
LOW
CVSS
3.6
EPSS
0.12%
Android
Original NVD Description
The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers, contacts info, etc.
Related CVEs
Other vulnerabilities affecting the same vendor(s)