Vulnerability in Applika Call Blocker
CVE-2023-29726
The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty data into the application's database. When the application starts, it loads the data from the database into memory. Once the attacker injects too much data, the application triggers an OOM error and crashes, resulting in a persistent denial of service.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.012 (66.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 66th percentile — 66.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.012 · newest: 0.012 · change: 0.000
Affected products
- Applika Call Blocker — versions 6.6.3
Weakness classification (CWE)
References
- play.google.com/store/apps/details (Product)
- www.call-blocker.info/ (Product)
- github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29726/CVE detail.md (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2023-29726?
- CVE-2023-29726 is a high-severity vulnerability in Applika Call Blocker, classified under Improper Resource Shutdown or Release. CVSS score: 7.5/10. Published 2023-05-30.
- How severe is CVE-2023-29726?
- High severity. CVSS v3 base score is 7.5 out of 10.