The Goodwy com.goodwy.dialer (aka Right Dialer) application through 5.1.0 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.goodwy.dialer.activities.DialerActivity component.
History

Fri, 08 Nov 2024 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Goodwy Com
Goodwy Com right Dialer
Weaknesses CWE-276
CPEs cpe:2.3:a:goodwy_com:right_dialer:*:*:*:*:*:*:*:*
Vendors & Products Goodwy Com
Goodwy Com right Dialer
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 07 Nov 2024 21:45:00 +0000

Type Values Removed Values Added
Description The Goodwy com.goodwy.dialer (aka Right Dialer) application through 5.1.0 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.goodwy.dialer.activities.DialerActivity component.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-11-07T00:00:00

Updated: 2024-11-08T16:28:34.466Z

Reserved: 2024-05-19T00:00:00

Link: CVE-2024-36063

cve-icon Vulnrichment

Updated: 2024-11-08T16:28:28.541Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-11-07T22:15:20.740

Modified: 2024-11-08T19:01:03.880

Link: CVE-2024-36063

cve-icon Redhat

No data.