CVE-2024-37575: The Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed application (with no permissions) to place phone...

0.0 CVSS

Description

The Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the org.mistergroup.shouldianswer.ui.default_dialer.DefaultDialerActivity component.

Classification

CVE ID: CVE-2024-37575

CVSS Base Severity: LOW

CVSS Base Score: 0.0

Affected Products

Vendor: n/a

Product: n/a

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.05% (probability of being exploited)

EPSS Percentile: 17.81% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://play.google.com/store/apps/details?id=org.mistergroup.shouldianswer
https://github.com/actuator/org.mistergroup.shouldianswer
https://github.com/actuator/org.mistergroup.shouldianswer/blob/main/CVE-2024-37575

Timeline