CoreCVE
Back

MEDIUM

The com.callassistant.android (aka AI Call Assistant & Screener) application 1.174 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.callassistant.android.ui.call.incall.InCallActivity component

Published Nov 7, 2024

Description

The com.callassistant.android (aka AI Call Assistant & Screener) application 1.174 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.callassistant.android.ui.call.incall.InCallActivity component.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-281

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Nov 7, 2024
Updated Feb 10, 2025
Reserved May 19, 2024
Link CVE-2024-36062
CISA Vulnrichment
Updated Nov 8, 2024
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2024-36062
Red Hat
Severity n/a
Public date n/a
Links CVE-2024-36062