CVE-2019-15363

The Leagoo Power 5 Android device with a build fingerprint of LEAGOO/Power5/Power5:8.1.0/O11019/1532686195:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a...

CVE-2019-15363

CVE-2019-15363 affects the Leagoo Power 5 Android device (build fingerprint LEAGOO/Power_5/Power_5:8.1.0/O11019/1532686195:user/release-keys). A pre-installed app with package name com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0) exposes an interface that allows any co-located app to mod...

CVE-2019-15362

The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88go/iris88go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a...

CVE-2019-15362

CVE-2019-15362 affects the Lava Iris 88 Go Android device (build fingerprint LAVA/iris88_go/iris88_go:8.1.0/O11019/1538188945:user/release-keys). A pre-installed app with package name com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0) exposes an interface that allows any co-located app to ...

CVE-2019-15361

The CVE-2019-15361 entry concerns the Infinix Note 5 Android device with fingerprint Infinix/H632C/Infinix-X605_sprout:8.1.0/O11019/CE-180914V59:user/release-keys. A pre-installed app with package name com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0) exposes an exported interface that al...

CVE-2019-15361

The Infinix Note 5 Android device with a build fingerprint of Infinix/H632C/Infinix-X605sprout:8.1.0/O11019/CE-180914V59:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device t...

CVE-2019-15360

The CVE-2019-15360 entry applies to Hisense U965 devices (build Hisense/U965_4G_10/HS6739MT:8.1.0). A pre-installed app with package name com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0) exposes an interface that lets any co-located app modify a system property without proper authorizati...

CVE-2019-15360

The Hisense U965 Android device with a build fingerprint of Hisense/U9654G10/HS6739MT:8.1.0/O11019/HisenseU9654G10S01:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to...

CVE-2019-15359

The CVE-2019-15359 entry concerns Haier A6 Android devices with build fingerprint Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys and a pre-installed app (package com.mediatek.wfo.impl, versionCode 27, versionName 8.1.0). The vulnerability arises because any co-located app can modify a...

CVE-2019-15359

The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system proper...

CVE-2019-15358

The Dexp Z250 Android device with a build fingerprint of DEXP/Z250/Z250:8.1.0/O11019/1531130719:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system propert...

CVE-2019-15357

The Advan i6A Android device with a build fingerprint of ADVAN/i6A/i6A:8.1.0/O11019/1523602705:userdebug/test-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system proper...

CVE-2019-15356

The CVE-2019-15356 entry describes a local vulnerability on the Lava Flair Z1 Android device (build LAVA/Z1/Z1:8.1.0). A pre-installed app (package com.mediatek.wfo.impl, versionCode 27, versionName 8.1.0) exposes an interface that lets co-located apps modify a system property without proper auth...

CVE-2019-15356

The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system propert...

CVE-2019-15354

The CVE-2019-15354 entry concerns the Ulefone Armor 5 Android device. A pre-installed app (package com.mediatek.wfo.impl, v8.1.0) exposes an interface that allows any co-located app to modify a system property without proper authorization. This constitutes a local-impact, integrity-related vulner...

CVE-2019-15354

The Ulefone Armor 5 Android device with a build fingerprint of Ulefone/UlefoneArmor5/UlefoneArmor5:8.1.0/O11019/1528806701:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device...

CVE-2019-15353

The Coolpad N3C Android device with a build fingerprint of Coolpad/N3C/N3C:8.1.0/O11019/1538236809:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system...

CVE-2019-15352

CVE-2019-15352 affects the Coolpad 1851 Android device (build fingerprint Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys). The issue centers on a pre-installed app with package name com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0) that allows any co-located app to...

CVE-2019-15352

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify...

Debian DLA-1954-1 : lucene-solr security update

A security vulnerability was discovered in lucene-solr, an enterprise search server. The DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's 'dataConfig' parameter. The deb...