CVE-2025-43977

5.5 mediumEPSS 0.2%

Medium (5.5) in sktelecom com.skt.prod.dialer. EPSS 0.2% chance of exploitation in the next 30 days.

The com.skt.prod.dialer application through 12.5.0 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.skt.prod.dialer.activities.outgoingcall.OutgoingCallInternalBroadcaster component.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2025-07-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sktelecom:com.skt.prod.dialer

References

https://github.com/actuator/com.skt.prod.dialer
https://github.com/actuator/com.skt.prod.dialer/blob/main/CVE-2025-43977
https://play.google.com/store/apps/details?id=com.skt.prod.dialer

Check your stack JSON