CVE-2023-42718

Summary

CVE-2023-42718 is a vulnerability affecting the dialer component of certain applications. This issue arises due to the lack of a necessary permission check, enabling an attacker to record usage permissions of a targeted app. Consequently, local information disclosure can occur without requiring any additional execution privileges. This vulnerability poses a risk to the privacy and security of affected users and should be addressed promptly through an update or patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.