CVE-2019-15370

The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1526527761:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system...

CVE-2019-15383

The CVE-2019-15383 entry concerns the Allview X5 Android device (build ALLVIEW/X5_Soul_Mini/X5_Soul_Mini:8.1.0/O11019/1522468763:userdebug/release-keys). A pre-installed component, package com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0), exposes an interface that allows any co-located a...

CVE-2019-15377

The CVE-2019-15377 entry concerns a Cherry Flare S7 Android device (build Cherry_Mobile/Flare_S7_Deluxe/Flare_S7_Deluxe:8.1.0/O11019/1533920920:user/release-keys) with a pre-installed app package com.mediatek.wfo.impl (versionCode=27, versionName=8.1.0). The connected documents indicate this comp...

CVE-2019-15372

The CVE-2019-15372 entry concerns the Hisense F17 Android device, where a pre-installed app (package: com.mediatek.wfo.impl, versionCode 27, versionName 8.1.0) exposes an interface that lets any co-located app modify a system property without proper authorization. This is a local vulnerability wi...

CVE-2019-15370

The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1526527761:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system...

CVE-2019-15364

The CVE-2019-15364 entry concerns the Dexp BL250 Android device (build fingerprint DEXP/BL250/BL250:8.1.0/O11019/1530858027:user/release-keys) featuring a pre-installed app (package: com.mediatek.wfo.impl, versionCode 27, versionName 8.1.0). This component exposes an interface that allows any co-...

CVE-2019-15360

The Hisense U965 Android device with a build fingerprint of Hisense/U9654G10/HS6739MT:8.1.0/O11019/HisenseU9654G10S01:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to...

CVE-2019-15354

The CVE-2019-15354 entry concerns the Ulefone Armor 5 Android device. A pre-installed app (package com.mediatek.wfo.impl, v8.1.0) exposes an interface that allows any co-located app to modify a system property without proper authorization. This constitutes a local-impact, integrity-related vulner...