CVE-2023-44127 is a medium-severity vulnerability affecting LG's patched Call management app on Google Android and LG V60 ThinQ 5G devices. The flaw allows the app to launch implicit intents that inadvertently expose sensitive data, such as contact details and phone numbers, to any third-party applications installed on the same device. With a CVSS score of 5.5, this vulnerability requires user interaction (UI:R) and local access (AV:L) to exploit, leading to a high confidentiality impact (C:H) without affecting integrity or availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 8.0, <= 13.0CPE matchmatch criteria | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.