1-click MMI execution in Android

发生了什么

An application with the CALL_PHONE permission can execute carrier MMI/USSD codes with no user confirmation. A vulnerable application with browsable deeplinks can trigger MMI execution with a single tap.

摘要按规则整理自下方来源原文

来源