CVE-2025-43977: Sktelecom Com.skt.prod.dialer

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

The com.skt.prod.dialer application through 12.5.0 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.skt.prod.dialer.activities.outgoingcall.OutgoingCallInternalBroadcaster component.

Affected products

• Sktelecom Com.skt.prod.dialer: version 12.5.0 only

Published 2025-07-21. Last modified 2026-06-17.