CVE-2019-15386

CVE-2019-15386 affects the Lava Z60s Android device (build fingerprint LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys). A pre-installed app, com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0), exposes an interface that allows any co-located app to modify a system property without...

CVE-2019-15374

CVE-2019-15374 affects the Lava Iris 88 Lite Android device (build fingerprint LAVA/iris88_lite/iris88_lite:8.1.0...). A pre-installed app with package name com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0) exposes an interface that allows any co-located app to modify a system property wi...

CVE-2019-15374

The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88lite/iris88lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to...

CVE-2019-15373

CVE-2019-15373 affects the Symphony i95 Lite Android device. A pre-installed app (package: com.mediatek.wfo.impl, versionCode=27, versionName=8.1.0) exposes an interface that allows any co-located app on the device to modify a system property without proper authorization. The vulnerability is loc...

CVE-2019-15369

CVE-2019-15369 affects Lava Z61 Turbo devices running Android 8.1.0. A pre-installed app with package name com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0) exposes an interface that allows any co-located app to modify a system property without proper authorization. The provided connected...

CVE-2019-15369

The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61Turbo/Z61Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a...

CVE-2019-15365

The CVE-2019-15365 affects Lava Z92 devices (build LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys). A pre-installed app with package name com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0) exposes an interface that allows any co-located app to modify a system property without prope...

CVE-2019-15365

The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system property...

CVE-2019-15362

The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88go/iris88go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a...

CVE-2019-15362

CVE-2019-15362 affects the Lava Iris 88 Go Android device (build fingerprint LAVA/iris88_go/iris88_go:8.1.0/O11019/1538188945:user/release-keys). A pre-installed app with package name com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0) exposes an interface that allows any co-located app to ...

CVE-2019-15356

The CVE-2019-15356 entry describes a local vulnerability on the Lava Flair Z1 Android device (build LAVA/Z1/Z1:8.1.0). A pre-installed app (package com.mediatek.wfo.impl, versionCode 27, versionName 8.1.0) exposes an interface that lets co-located apps modify a system property without proper auth...

CVE-2019-15356

The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system propert...

CVE-2019-15339

The CVE-2019-15339 entry applies to the Lava Z60s Android device, where a pre-installed app (package: com.android.lava.powersave, versionCode=400, versionName=v4.0.27) exposes an interface that lets any co-located app programmatically disable and enable Wi‑Fi without the required access permissio...

CVE-2019-15339

The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.27 that allows any app co-located on the device to programmaticall...

CVE-2019-15338

The CVE-2019-15338 entry concerns Lava Iris 88 Lite (build fingerprint LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys}). A pre-installed app with package name com.android.lava.powersave (versionCode 400, versionName v4.0.27) exposes an interface that lets any co-located ap...

CVE-2019-15338

The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88lite/iris88lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.27 that allows any app co-located on the devic...

CVE-2019-15337

The CVE-2019-15337 entry affects Lava Z81 devices running Android, due to a pre-installed app with package name com.android.lava.powersave (versionCode 400, versionName v4.0.31) that exposes an interface allowing any co-located app to programmatically disable and enable Wi‑Fi without the necessar...

CVE-2019-15337

The Lava Z81 Android device with a build fingerprint of LAVA/Z81/Z81:8.1.0/O11019/1532317309:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.31 that allows any app co-located on the device to programmatically...

CVE-2019-15336

CVE-2019-15336 describes a local vulnerability in Lava Z61 Turbo where a pre-installed app (com.android.lava.powersave, versionCode 400, versionName v4.0.31) exposes an exported interface that lets any co-located app disable/enable Wi‑Fi without the required permission. This affects Lava Z61 Turb...

CVE-2019-15336

The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61Turbo/Z61Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.31 that allows any app co-located on the device to...