CVE-2023-0238 (warp)

Due to lack of a security policy, the WARP Mobile Client (<=6.29) for Android was susceptible to this vulnerability which allowed a malicious app installed on a victim's device to exploit a peculiarity in an Android function, wherein under certain conditions, the malicious app could dictate the task behaviour of the WARP app.

android app client conditions cve device exploit function malicious malicious app mobile policy security security policy task under victim vulnerability warp