TextNow 2ndLine Application Unintended Call Placement Vulnerability

A vulnerability in the TextNow 2ndLine application for Android, specifically in version 24.17.1.0, allows any installed application to make phone calls without user interaction. This is achieved by sending a crafted intent to the exported DialerActivity component. The vulnerability does not require any special permissions, enabling unauthorized call placement from other apps.

Impact

Exploitation of this vulnerability allows for unauthorized phone calls to be made from the affected device, without the user's consent or knowledge.