CVE-2023-44127: Call management - Implicit activity intents disclose contact details and phone numbers

Q: What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2023-44127.

Q: What is the severity of CVE-2023-44127?

The severity of CVE-2023-44127 is medium.

Q: Which software is affected by CVE-2023-44127?

The affected software includes Google Android versions 8.0 to 13.0 and the LG V60 Thin Q 5g (not vulnerable).

Q: What is the impact of CVE-2023-44127?

The vulnerability allows the disclosure of sensitive data, such as contact details and phone numbers, to all third-party apps installed on the same device.

Q: Where can I find more information about CVE-2023-44127?

You can find more information about CVE-2023-44127 at the following link: https://lgsecurity.lge.com/bulletins/mobile#updateDetails

Published Sep 27, 2023

Updated

he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as contact details and phone numbers.

Affected Software

2 affected components

Google Android>=8.0<=13.0

LG V60 Thin Q 5g

Event History

Sep 27, 2023

CVE Published

via MITRE·02:05 PM

Data Sourced

via MITRE·02:05 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2023-44127.

What is the severity of CVE-2023-44127?

The severity of CVE-2023-44127 is medium.

Which software is affected by CVE-2023-44127?

The affected software includes Google Android versions 8.0 to 13.0 and the LG V60 Thin Q 5g (not vulnerable).

What is the impact of CVE-2023-44127?

The vulnerability allows the disclosure of sensitive data, such as contact details and phone numbers, to all third-party apps installed on the same device.

Where can I find more information about CVE-2023-44127?