Vulnerability in Applika Call Blocker
CVE-2023-29726
The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty data into the application's database. When the application starts, it loads the data from the database into memory. Once the attacker injects too much data, the application triggers an OOM error and crashes, resulting in a persistent denial of service.
EPSS: 0.012 (64.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Applika Call_blocker — versions 6.6.3
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Product)
- cve@mitre.org (Product)
- cve@mitre.org (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2023-29726?
- CVE-2023-29726 is a high-severity vulnerability in Applika Call Blocker, classified under Improper Resource Shutdown or Release. CVSS score: 7.5/10. Published 2023-05-30.
- How severe is CVE-2023-29726?
- High severity. CVSS v3 base score is 7.5 out of 10.