CVE-2024-53936

6.3 mediumEPSS 0.2%

Medium (6.3). EPSS 0.2% chance of exploitation in the next 30 days.

The com.asianmobile.callcolor (aka Color Phone Call Screen App) application through 24 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component.

Severity

CVSS 3.1

6.3 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
Published: 2025-01-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/actuator/com.asianmobile.callcolor
https://github.com/actuator/com.asianmobile.callcolor/blob/main/CVE-2024-53936

Check your stack JSON