CVE-2013-6272 - The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application

Back Back to CVE browser

HIGH

The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application

Published May 2, 2018

7.8

HIGH

CVSS 3.0

EPSS 1.44%

Description

The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (5)

http://packetstormsecurity.com/files/127359/Android-OS-Authorization-Missing.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2014/Jul/13
mailing-listx_refsource_FULLDISCExploitMailing ListThird Party Advisory
http://www.securityfocus.com/bid/68415
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://curesec.com/blog/article/blog/35.html
x_refsource_MISCExploitThird Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/94423
vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://packetstormsecurity.com/files/127359/Android-OS-Authorization-Missing.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2014/Jul/13		mailing-listx_refsource_FULLDISCExploitMailing ListThird Party Advisory
http://www.securityfocus.com/bid/68415		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://curesec.com/blog/article/blog/35.html		x_refsource_MISCExploitThird Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/94423		vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 2, 2018

Updated Aug 6, 2024

Reserved Oct 24, 2013

Link CVE-2013-6272

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2013-6272

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-6272