VULNERABILITY INTELLIGENCE
CVE-2026-28581
CVSS score4 MEDIUM
EPSS probability0.07%
CISA KEVNot currently listed
Published2026-06-01
Last modified2026-09-08
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local escalation with User execution privileges needed. User interaction is needed for exploitation.
Weakness classification
- nvd@nist.gov: CWE-476