Posted by Karan Saini on Oct 15Android's CALL_PHONE permission, shown to users as "make and manage phone calls", also authorises execution of carrier MMI/USSD codes against the SIM. The permission text does not mention this, no confirmation is shown before execution -- a transient "USSD code running" dialog appears only afterwards Weiterlesen: 1-click MMI/USSD execution in Android via CALL_PHONE and browser-reac…
Intelligence View
⚡ tsecurity.de Intelligence
1-click MMI/USSD execution in Android via CALL_PHONE and browser-reachable dialer deeplinks (ACR Phone / com.nll.cb)
Posted by Karan Saini on Oct 15Android's CALL_PHONE permission, shown to users as "make and manage phone calls", also authorises execution of carrier MMI/USSD…
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar