NetSight
medium6.2

CVE-2024-36064

The NLL com.nll.cb (aka ACR Phone) application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application (with no permissions) …

Impact

The NLL com.nll.cb (aka ACR Phone) application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component.

Affected products

ProductAffected versions
NLL Com.Nll.Cb (Aka ACR Phone) Application
through 0.330-playStore-N

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References