CVE-2024-6780
Improper permission control in com.android.server.telecom
CVE-2024-6780 is a low vulnerability (CVSS 3.3) in Tecno Com.android.server.telecom, published July 16, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile. No source names a fixed version.
Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Improper permission control in com.android.server.telecom
Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks.
- Record
CVE-2024-6780- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Weakness
- CWE-732
- Updated
- 2026-11-02
EUVDEUVD-2024-47812
Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks.
- Record
EUVD-2024-47812- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5w6v-768m-rvhm
Improper permission control in the mobile application (com.android.server.telecom) may lead to...
Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks.
- Record
GHSA-5w6v-768m-rvhm- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Weakness
- CWE-732
- Updated
- 2026-11-02
NVD
Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks.
- Record
CVE-2024-6780- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Weakness
- CWE-732
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases, published | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |