{"id":"CVE-2013-6272","aliases":["EUVD-2013-6100","GHSA-fcgr-c79j-5q35"],"status":"published","title":"The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1...","description":"The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01416,"percentile":0.72945,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2018-05-02T15:00:00Z","modified":"2026-06-17T00:00:13Z","products":[{"vendor":"google","product":"android"}],"references":[{"url":"http://seclists.org/fulldisclosure/2014/Jul/13","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Exploit","Mailing List","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/94423","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/127359/Android-OS-Authorization-Missing.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://curesec.com/blog/article/blog/35.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/68415","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6272"},{"url":"https://github.com/advisories/GHSA-fcgr-c79j-5q35"}],"sources":{"cve":[{"id":"CVE-2013-6272","description":"The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application.","status":"published","published":"2018-05-02T15:00:00Z","modified":"2024-08-06T17:39:00.181Z","updated_at":"2026-11-02T14:34:57.195423Z"}],"euvd":[{"id":"EUVD-2013-6100","description":"The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application.","status":"published","published":"2018-05-02T15:00:00Z","modified":"2024-08-06T17:39:00Z","updated_at":"2026-11-03T01:56:26.749939Z"}],"ghsa":[{"id":"GHSA-fcgr-c79j-5q35","title":"The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1...","description":"The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application.","status":"published","published":"2022-05-14T03:19:31Z","modified":"2023-02-02T05:07:21Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:52:28.96683Z"}],"nvd":[{"id":"CVE-2013-6272","description":"The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application.","status":"published","published":"2018-05-02T15:29:00.5Z","modified":"2026-06-17T00:00:13.893Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:02:52.545039Z"}]}}