AIKIDO-2025-10168
flutter_callkit_incoming is vulnerable to Improper Access Control
65
Medium Risk
This Affects:
flutter_callkit_incomingTL;DR
Affected versions of the flutter_callkit_incoming package are vulnerable to Task Hijacking due to misconfigurations in AndroidManifest.xml related to Task Control features. This vulnerability allows unauthorized attackers or malware to take over legitimate apps, potentially leading to the theft of sensitive user information.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
flutter_callkit_incoming is vulnerable to Improper Access Control in versions 1.0.0 - 2.5.0.
How to fix this
Upgrade the flutter_callkit_incoming library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant