medium5.5
CVE-2025-43977
The com.skt.prod.dialer application through 12.5.0 for Android enables any installed application (with no permissions) to place phone calls without user intera…
Impact
The com.skt.prod.dialer application through 12.5.0 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.skt.prod.dialer.activities.outgoingcall.OutgoingCallInternalBroadcaster component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sktelecom | Com.Skt.Prod.Dialer | Version 12.5.0 |