This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to access a user's call history.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-2020-03-24-2 macOS Catalina 10154, Security Update
2020-002 Mojave, Security Update 2020-002 High Sierra
macOS Catalina 10154, Security Update 2020-002 Mojave, Security
Update 2020-002 High Sierra are now available and address the
following:
Apple HSSPI Support
Available for: macOS Cat ...
Vulmon