The Call Blocker application 6.6.3 for Android allows unauthorized applications to use…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-922.
Summary
The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its database that is related to user privacy settings and affects the implementation of the normal functionality of the application. An attacker can use this to cause an escalation of privilege attack.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-29727
- 2026-10-03 Alias added: GHSA-rxg5-326q-pvp8
References
More Applika Call Blocker vulnerabilities
- TI-2023-13982 The Call Blocker application 6.6.3 for Android allows attackers to tamper with… CVSS 3.1CRITICAL 9.8
- TI-2023-13980 The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an… CVSS 3.1HIGH 7.5
Sources
- CVE-2023-29727 · CVE Program
- CVE-2023-29727 · NVD
- FIRST EPSS
- GHSA-rxg5-326q-pvp8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences