PT-2019-14130

Name of the Vulnerable Software and Affected Versions Asus ASUS A002 Android device with a build fingerprint of asus/WW ASUS A002/ASUS A002:7.0/NRD90M/14.1600.1805.51-20180626:user/release-keys Description The issue concerns a pre-installed app with a package name of com.asus.loguploaderproxy tha...

PT-2019-14128

Name of the Vulnerable Software and Affected Versions Asus ZenFone 5Q Android device with a build fingerprint of asus/WW Phone/ASUS X017D 2:7.1.1/NGI77B/14.0400.1809.059-20181016:user/release-keys Description The issue concerns a pre-installed app with a package name of com.asus.loguploaderproxy...

PT-2019-14139

Name of the Vulnerable Software and Affected Versions Asus ZenFone 5Q Android device with a build fingerprint of asus/WW Phone/ASUS X017D 2:7.1.1/NGI77B/14.0400.1809.059-20181016:user/release-keys Description The issue concerns a pre-installed app with a package name of com.asus.loguploaderproxy...

PT-2019-14191

Name of the Vulnerable Software and Affected Versions Samsung J7 Duo Android device with a build fingerprint of samsung/j7duolteub/j7duolte:8.0.0/R16NW/J720MUBS3ASB2:user/release-keys com.samsung.android.themecenter app version 7.0.0.0 Description The issue allows other pre-installed apps to...

CVE-2019-15402: Undefined Security Weakness

The Asus ASUSA0022 Android device with a build fingerprint of asus/WWASUSA0022/ASUSA0022:7.0/NRD90M/14.1610.1802.18-20180321:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

PT-2019-14179

Name of the Vulnerable Software and Affected Versions Samsung j3popeltecan Android device with a build fingerprint of samsung/j3popeltevl/j3popeltecan:8.1.0/M1AJQ/J327WVLS3BSA2:user/release-keys com.samsung.android.themecenter app version 7.0.1.0 Description The issue allows other pre-installed...

CVE-2019-15406: Undefined Security Weakness

The Asus ASUSX00LD3 Android device with a build fingerprint of asus/WWPhone/ASUSX00LD3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

PT-2019-14141

Name of the Vulnerable Software and Affected Versions Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW Z01M/ASUS Z01M 1:7.1.1/NMF26F/WW 71.50.395.57 20180913:user/release-keys Description The device contains a pre-installed app with a package name of...

PT-2019-14134

Name of the Vulnerable Software and Affected Versions Asus ASUS X00K 1 Android device with a build fingerprint of asus/CN X00K/ASUS X00K 1:7.0/NRD90M/CN X00K-14.01.1711.27-20180420:user/release-keys Description The issue concerns a pre-installed app with a package name of com.asus.loguploaderprox...

Google Warns of Growing Android Attack Vector: Backdoored SDKs and Pre-Installed Apps

Google is reporting an uptick in efforts by bad actors to plant potentially harmful applications PHAs on Android devices via pre-installed apps and by bundling them with system updates delivered over the air. The technique is especially troubling, Google said, because PHAs are often malicious and...

Flaws in Pre-Installed Apps Expose Millions of Android Devices to Hackers

Bought a new Android phone? What if I say your brand new smartphone can be hacked remotely? Nearly all Android phones come with useless applications pre-installed by manufacturers or carriers, usually called bloatware, and there's nothing you can do if any of them has a backdoor built-in—even if...

Security Advisory - Authentication Bypass Vulnerability in Some Pre-installed Apps on Huawei Phones

There is an authentication bypass vulnerability in some pre-installed apps on Huawei mobile phones due to insufficient validation on invocation requests. An attacker may trick a user into installing a malicious app which can invoke the open interfaces of the vulnerable apps to install any apps...

Insight into Installed Apps Widget

XenMobile Dashboard provides different widgets which help admins to view useful information at a glance. Other than just viewing the summary that appears in form of graphs, admins can also export the complete set of data as a CSV file to view the details. Installed Apps widget is one of the very...

Android Framework APIs Component Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Framework APIs are one of the API components used to create the framework. A power lifting vulnerability exists in the Framework APIs component in Android. An attacker can exploit...

New Android Smartphones will Come with Fewer Pre-installed Apps

A sigh of relief indeed! Google is finally listening to us; it is ditching its haunting bloatware from the upcoming Android smartphones and tablets. As per the current situation, our Android devices are attacked with Google's suite of apps like Google Play Games, Google Newsstand, Google Play...

Xiaomi Mi 4 Smartphone Pre-loaded with Malware and Custom Android ROM

Once again the very popular and the world's third largest smartphone distributor Xiaomi, which had previously been criticized for secretly stealing users’ information from the device without the user's permissions, has been found spreading malware. The top selling Android smartphone in China,...