CVE-2026-18604: textPlus Text Message and Call App com.gogii.textplus DialerActivity improper export of android application components
A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android. This impacts the function DialerActivity of the component com.gogii.textplus. Such manipulation leads to improper export of android application components. The attack needs to be performed locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-18604?
CVE-2026-18604 has a medium severity rating of 5.3.
How do I fix CVE-2026-18604?
To fix CVE-2026-18604, update the textPlus Text Message and Call App to version 8.3.6 or later.
What component is affected by CVE-2026-18604?
CVE-2026-18604 affects the DialerActivity component of the textPlus Text Message and Call App.
What type of exploitation is possible with CVE-2026-18604?
CVE-2026-18604 allows for improper export of Android application components, requiring local exploitation.
Which versions of the textPlus app are impacted by CVE-2026-18604?
textPlus Text Message and Call App versions up to 8.3.5 are impacted by CVE-2026-18604.