CVE-2024-36437

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

The com.enflick.android.TextNow (aka TextNow: Call + Text Unlimited) application 24.17.0.2 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.enflick.android.TextNow.activities.DialerActivity component.

Published 2025-02-03. Last modified 2026-06-17.