CVE-2024-53932

CRITICAL

The com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: Call Screen Theme) application through 21.1.9 for Android enables any application (with no permissions) to place phone ca...

Affects 0 products across 3 vendors.

BCS6.08
CVSS 3.19.1
EPSS0.3%
Percentile27th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, no availability impact.
CWE Weakness Definitions
CWE-732: Incorrect Permission Assignment for Critical Resource

Software sets permissions on critical resources allowing unintended actors to read or modify them.

CWE-922: CWE-922
Related Attack Patterns (CAPEC)
CAPEC-60 Reusing Session IDs (aka Session Replay)
via CWE-732
CAPEC-61 Session Fixation
via CWE-732
CAPEC-127 Directory Indexing
via CWE-732
CAPEC-206 Signing Malicious Code
via CWE-732
CAPEC-642 Replace Binaries
via CWE-732
Show all 11

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ SAGE Intelligence — CITED Relevance Research Team

The Color Phone: Call Screen Theme application through version 21.1.9 for Android is vulnerable to an intent injection attack that allows any application to initiate phone calls without user interaction.

BSID: BS-2025-GLOBAL-221388-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-53932?
The Color Phone: Call Screen Theme application through version 21.1.9 for Android is vulnerable to an intent injection attack that allows any application to initiate phone calls without user interaction.
What is the CVSS score for CVE-2024-53932?
CVE-2024-53932 has CVSS 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. EPSS: 0.3%.
Is CVE-2024-53932 actively exploited?
No confirmed active exploitation of CVE-2024-53932 as of 2026-05-30.
How do I remediate CVE-2024-53932?
Priority: IMMEDIATE.
What systems are affected by CVE-2024-53932?
CVE-2024-53932 affects: Android, Color, Place.
Vulnerability Details
CVE IDCVE-2024-53932
BSIDBS-2025-GLOBAL-221388-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Published2025-01-06
Last Modified2026-04-15
ICS Relevance0%
Weakness (CWE)
Incorrect Permission Assignment for Critical ResourceCWE-922
SourceNVD
Official Description

The com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: Call Screen Theme) application through 21.1.9 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.remi.colorphone.callscreen.calltheme.callerscreen.dialer.DialerActivity component.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can craft a malicious intent and send it to the com.remi.colorphone.callscreen.calltheme.callerscreen.dialer.DialerActivity component of the Color Phone: Call Screen Theme application. This allows the attacker to place phone calls on behalf of the user without their consent or knowledge.

Exploitation Likelihood: HIGH

Affected Products
VendorProductFixed Version
Android — —
Color — —
Place — —
Remediation

No patch URL on record. Monitor vendor security advisories directly.

Threat Intelligence
● Threat Intelligence Validated: July 2026 | Threat Age: 564 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
SAGE Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash9e4339438fdb1a27793fda7949f8e0cdb03f6fa4b5abdc506acf0a62953b9768ee275509b405a9c202a1da65d461c904982713b1369551212323cc3d078809c5
Related CVEs affecting Android
CVE-2023-4617 10.0 Incorrect authorization vulnerability in HTTP POST method in Govee Home appli... CVE-2024-12402 9.8 The Themes Coder – Create Android & iOS Apps For Your Woocommerce Site plugin... CVE-2026-30496 9.8 The Optoma CinemaX P2 projector (firmware TVOS-04.24.010.04.01, Android 8.0.0... CVE-2024-53931 9.1 The com.glitter.caller.screen (aka iCaller, Caller Theme & Dialer) applicatio... CVE-2025-69515 9.1 An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows att...
View all Android CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.1 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →