Visual Voice Mail
Approved changes feed: RSS · Atom
cpe:2.3:a:visual_voice_mail_project:visual_voice_mail:*:*:*:*:*:android:*:*part: a version: * update: *
| Vendor | Visual Voice Mail Project (ca033e0e-4728-5192-a517-118e029885c5) |
|---|---|
| Product | Visual Voice Mail (0425f693-c33a-511a-a377-5ac07a15a175) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | android |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-23835 |
vulnerable | 2026-06-08 05:40:59.259227 |
Details available
The Visual Voice Mail (VVM) application through 2022-02-24 for Android allows persistent access if an attacker temporarily controls an application that has the READ_SMS permission, and reads an IMAP credentialing message that is (by design) not displayed to the victim within the AOSP SMS/MMS messaging application. (Often, the IMAP credentials are usable to listen to voice mail messages sent before the vulnerability was exploited, in addition to new ones.) NOTE: some vendors characterize this as not a "concrete and exploitable risk.
Published: 2022-02-25T03:31:02.000Z
Updated: 2024-08-03T03:51:46.044Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.