CVE-2019-15419

Technical details about CVE-2019-15419 are not publicly provided in the connected documents. Monitor for updates and new disclosures before drawing conclusions on impact, affected components, or remediation.

CVE-2019-15418

The Asus ASUSX00K1 Android device with a build fingerprint of asus/CNX00K/ASUSX00K1:7.0/NRD90M/CNX00K-14.01.1711.27-20180420:user/release-keys contains a pre-installed app with a package name of com.lovelyfont.defcontainer app versionCode=5, versionName=5.0.1 that allows unauthorized command...

CVE-2019-15417

The Tecno Spark Pro Android device with a build fingerprint of TECNO/H3722/TECNO-K8:7.0/NRD90M/K8-H3722ABCDE-N-171229V96:user/release-keys contains a pre-installed app with a package name of com.lovelyfont.defcontainer app versionCode=7, versionName=7.0.5 that allows unauthorized dynamic code...

CVE-2019-15417

The CVE-2019-15417 entry concerns a Tecno Spark Pro Android device (build TECNO/H3722/TECNO-K8:7.0/NRD90M/K8-H3722ABCDE-N-171229V96:user/release-keys) with a pre-installed app, com.lovelyfont.defcontainer (versionCode 7, versionName 7.0.5), that allows unauthorized dynamic code loading via a conf...

CVE-2019-15416

The Sony keyakikddi Android device with a build fingerprint of Sony/keyakikddi/keyakikddi:7.1.1/TONE3-3.0.0-KDDI-170517-0326/1:user/dev-keys contains a pre-installed app with a package name of com.kddi.android.packageinstaller app versionCode=70008, versionName=08.10.03 that allows other...

CVE-2019-15416

The CVE-2019-15416 entry details a vulnerability in the Sony keyaki_kddi Android device (build Sony/keyaki_kddi/keyaki_kddi:7.1.1/TONE3-3.0.0-KDDI-170517-0326/1:user/dev-keys) where a pre-installed app (com.kddi.android.packageinstaller, v70008 / 08.10.03) exposes an app component that allows oth...

CVE-2019-15415

CVE-2019-15415 concerns a pre-installed app on the Xiaomi Redmi 5 Android device (package com.huaqin.factory) that enables unauthorized modification of wireless settings through a confused-deputy attack. Impact is described as access by any co-located app with low CVSS but partial integrity impac...

CVE-2019-15414

The Asus ZenFone AR Android device with a build fingerprint of asus/WWASUSA002/ASUSA002:7.0/NRD90M/14.1600.1805.51-20180626:user/release-keys contains a pre-installed app with a package name of com.asus.splendidcommandagent app versionCode=1510200105, versionName=1.2.0.21180605 that allows other...

CVE-2019-15414

CVE-2019-15414 affects the Asus ZenFone AR; a pre-installed app (com.asus.splendidcommandagent, v1.2.0.21_180605) exposes an accessible component that allows other pre-installed apps to perform command execution. This requires signatureOrSystem permissions granted to the interacting apps, enablin...

CVE-2019-15413

The Asus ZenFone 3 Ultra Android device with a build fingerprint of asus/WWPhone/ASUSA001:7.0/NRD90M/14.1010.1804.75-20180612:user/release-keys contains a pre-installed app with a package name of com.asus.splendidcommandagent app versionCode=1510200105, versionName=1.2.0.21180605 that allows othe...

CVE-2019-15413

The CVE-2019-15413 entry describes a vulnerability on the Asus ZenFone 3 Ultra running Android 7.0 (NRD90M) where a pre-installed component, com.asus.splendidcommandagent (versionCode 1510200105, versionName 1.2.0.21_180605), allows other pre-installed apps to execute commands via an accessible c...

CVE-2019-15412

The CVE-2019-15412 entry concerns the Asus ZenFone 4 Selfie. A pre-installed component, com.asus.loguploaderproxy (versionCode 1570000020, versionName 7.0.0.4_170901) exposes an accessible app component that can be used by other pre-installed apps to perform command execution. This capability is ...

CVE-2019-15410

The Asus ZenFone 5Q Android device with a build fingerprint of asus/WWPhone/ASUSX017D2:7.1.1/NGI77B/14.0400.1809.059-20181016:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

CVE-2019-15409

The Asus ZenFone 5Q Android device with a build fingerprint of asus/WWPhone/ASUSX017D2:7.1.1/NGI77B/14.0400.1809.059-20181016:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

CVE-2019-15409

CVE-2019-15409 affects the Asus ZenFone 5Q running Android 7.1.1. A pre-installed app, com.asus.loguploaderproxy (versionCode 1570000020), exposes a component that allows other pre-installed apps to perform command execution. This can be exploited by any pre-installed app that holds signatureOrSy...

CVE-2019-15408

The Asus ZenFone 5 Lite Android device with a build fingerprint of asus/WWPhone/ASUSX017D1:7.1.1/NMF26F/14.0400.1810.061-20181107:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

CVE-2019-15407

The Asus ASUSX0151 Android device with a build fingerprint of asus/CNX015/ASUSX0151:7.0/NRD90M/CNX015-14.00.1709.35-20171215:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000015, versionName=7.0.0.3161222 that allows other...

CVE-2019-15407

The CVE-2019-15407 entry concerns the ASUS_X015_1 Android device where a pre-installed app (package com.asus.loguploaderproxy, versionCode 1570000015, versionName 7.0.0.3_161222) exposes an app component that enables command execution by other pre-installed apps. The vulnerability arises because ...

CVE-2019-15406

The Asus ASUSX00LD3 Android device with a build fingerprint of asus/WWPhone/ASUSX00LD3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

CVE-2019-15406

The CVE-2019-15406 entry concerns the Asus ASUS_X00LD_3 Android device. A pre-installed app (package com.asus.loguploaderproxy; versionCode=1570000020, versionName=7.0.0.4_170901) exposes a component that can be leveraged by other pre-installed apps to perform command execution. The vulnerability...