CVE-2019-15389

The CVE-2019-15389 entry concerns Haier A6 devices running Haier/A6/A6:8.1.0 with a pre-installed platform app com.lovelyfont.defcontainer (FontCoverService) that is exported and can be controlled by any co-located app to execute commands as the system user. A secondary app, com.ekesoo.lovelyhifo...

CVE-2019-15388

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.1.13. This app contains an exported service name...

CVE-2019-15388

CVE-2019-15388 affects Coolpad 1851 devices with Android 8.1.0 where a pre-installed platform app com.lovelyfont.defcontainer exposes an exported service FontCoverService that accepts arbitrary commands and runs them as the system user. The attack requires no privileges and can be triggered by a ...

CVE-2019-15351

The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service named...

CVE-2019-15348

The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service named...

CVE-2019-15348

CVE-2019-15348 affects Tecno Camon Android devices that include a pre-installed platform app com.lovelyfont.defcontainer (FontCoverService). The exported service allows any co-located app to pass arbitrary shell-script commands to be executed as the system user when triggered via a logcat message...

CVE-2019-15347

The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service...

CVE-2019-15347

The CVE-2019-15347 entry details a pre-installed platform app on Tecno Camon iClick 2 (build TECNO/H622/…/8.1.0) named com.lovelyfont.defcontainer (version 7.0.11) that exposes an exported service, FontCoverService. This service allows any co-located app to send arbitrary shell-commands to be exe...

CVE-2019-15345

The CVE-2019-15345 issue affects the Tecno Camon iClick. A pre-installed platform app com.lovelyfont.defcontainer (versionCode 7, versionName 7.0.8) exposes an exported service com.lovelyfont.manager.service.FunctionService that lets any co-located app supply a path to a Dex file, which it will d...

CVE-2019-15344

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.8. This app contains an exported service named...

CVE-2019-15344

CVE-2019-15344 affects the Tecno Camon iClick Android device. A pre-installed platform app with package name com.lovelyfont.defcontainer (versionCode 7, versionName 7.0.8) exposes an exported service com.lovelyfont.manager.FontCoverService that allows any co-located app to send arbitrary commands...

CVE-2019-15343

CVE-2019-15343 affects Tecno Camon iClick devices running Android 8.1 (build TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys). A pre-installed platform app com.lovelyfont.defcontainer (versionCode 7, versionName 7.0.8) exposes an exported service, com.lovelyfont.manager.FontCoverS...

CVE-2019-15342

The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service...

CVE-2019-15342

The CVE-2019-15342 vulnerability affects Tecno Camon iAir 2 Plus (TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys). A pre-installed platform app com.lovelyfont.defcontainer exposes FontCoverService, allowing any co-located app to submit arbitrary shell commands to be executed as ...

CVE-2019-15341

The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service...

PT-2019-14072

Name of the Vulnerable Software and Affected Versions Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys Description The issue concerns a pre-installed platform app with a package name of com.lovelyfont.defcontainer that...

PT-2019-14073

Name of the Vulnerable Software and Affected Versions Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys Description The pre-installed platform app com.lovelyfont.defcontainer contains an exported service named...

PT-2019-14118

Name of the Vulnerable Software and Affected Versions Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys Description The pre-installed platform app com.lovelyfont.defcontainer versionCode=7, versionName=7.1.13 contains an exported servic...

PT-2019-14071

Name of the Vulnerable Software and Affected Versions Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys Description The issue concerns a pre-installed platform app with a package name of com.lovelyfont.defcontainer...

PT-2019-14076

Name of the Vulnerable Software and Affected Versions Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys Description The pre-installed platform app with a package name of com.lovelyfont.defcontainer contains an exported...