CVE-2023-41824

LowCVSS 2.8/10Last modified Jun 17, 2026

Description

An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data.

Metrics

CVSS 3.1 2.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-927

Affected software

Vendor	Product	Versions
Motorola	Phones	< 2023-12-01

References

Timeline

Published: May 3, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2023

CVE-2023-418252.8A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to access local files.CVE-2023-418265.1A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or inte CVE-2023-418275.1An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inj CVE-2023-418284.4An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-export CVE-2023-418295.0An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application t CVE-2023-41839.8A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects u CVE-2023-418306.5An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files wi CVE-2023-418337.5A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via CVE-2023-418346.1Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allows remote attackers CVE-2023-418357.5When a Multipart request is performed but some of the fields exceed the maxStringLength limit, the upload files will remain in struts.multi CVE-2023-418366.1An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0, FortiS CVE-2023-418387.1An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and 7.2.0 through 7.2.3