PT-2017-7762

Name of the Vulnerable Software and Affected Versions BLU R1 HD devices with Shanghai Adups software Description An issue allows any app on the device to read, write, and delete files as the system user due to the content provider named com.adups.fota.sysoper.provider.InfoProvider in the app with...

CVE-2016-10137: Undefined Security Weakness

An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sysoper.provider.InfoProvider in the app with a package name of com.adups.fota.sysoper allows any app on the device to read, write, and delete files as the system user. In the...

PT-2017-7764

Name of the Vulnerable Software and Affected Versions BLU R1 HD devices with Shanghai Adups software Description An issue was discovered that allows for the exfiltration of user data. The com.adups.fota.sysoper app executes as the system user due to its android:sharedUserId attribute being set to...

CVE-2016-10136: Undefined Security Weakness

An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sysoper.provider.InfoProvider in the app with a package name of com.adups.fota.sysoper allows any app on the device to read, write, and delete files as the system user. In the...