CVE-2023-29727
📋 TL;DR
CVE-2023-29727 is a critical vulnerability in Call Blocker 6.6.3 for Android that allows unauthorized applications to delete privacy-related data from the app's database. This enables attackers to disrupt the app's normal functionality and potentially escalate privileges. Only Android users with the vulnerable version of Call Blocker installed are affected.
💻 Affected Systems
- Call Blocker for Android
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Complete loss of call blocking functionality, exposure of privacy settings, and potential privilege escalation allowing further system compromise.
Likely Case
Disruption of call blocking features, loss of user-configured block lists, and privacy settings being reset or deleted.
If Mitigated
Minimal impact if app is updated or removed, with only temporary service disruption.
🎯 Exploit Status
Exploitation requires a malicious app to be installed on the same device. The exposed components allow any app to interact with Call Blocker's database without authentication.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 6.6.4 or later
Vendor Advisory: https://www.call-blocker.info/
Restart Required: Yes
Instructions:
1. Open Google Play Store. 2. Search for 'Call Blocker'. 3. Update to version 6.6.4 or later. 4. Restart the app after update.
🔧 Temporary Workarounds
Uninstall vulnerable version
androidRemove the vulnerable app until patched version is available
adb uninstall com.cuiet.blockCalls
Restrict app permissions
androidLimit app permissions to minimum required functionality
🧯 If You Can't Patch
- Uninstall the Call Blocker app immediately
- Use Android's built-in call blocking features instead
🔍 How to Verify
Check if Vulnerable:
Check app version in Android Settings > Apps > Call Blocker > App infoCheck Version:
adb shell dumpsys package com.cuiet.blockCalls | grep versionNameVerify Fix Applied:
Verify app version is 6.6.4 or higher in Google Play Store or app settings📡 Detection & Monitoring
Log Indicators:
- Unexpected database modifications in Call Blocker logs
- Permission denial errors from other apps trying to access Call Blocker components
Network Indicators:
- No network indicators - this is a local app vulnerability
SIEM Query:
No applicable SIEM query - this is a mobile app vulnerability🔗 References
- https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29727/CVE%20detail.md
- https://play.google.com/store/apps/details?id=com.cuiet.blockCalls
- https://www.call-blocker.info/
- https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29727/CVE%20detail.md
- https://play.google.com/store/apps/details?id=com.cuiet.blockCalls
- https://www.call-blocker.info/
