The com.skt.prod.dialer application through 12.5.0 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.skt.prod.dialer.activities.outgoingcall.OutgoingCallInternalBroadcaster component.
No PoCs from references.
- https://github.com/actuator/cve
- https://github.com/fkie-cad/nvd-json-data-feeds