CVE-2015-3888: Jolla Sailfish OS

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL.

Affected products

• Jolla Sailfish OS: before 1.1.2.16 (fixed in 1.1.2.16)

Published 2018-01-12. Last modified 2026-06-17.