CVE-2023-44126 (published 2023-09-27T14:01:46.084Z)
The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers, contacts info, etc.
Affected products: Vendor: LG Electronics
Product: LG V60 Thin Q 5G(LMV600VM)
Versions: Android 8