CVE-2019-15444

The Samsung S7 Android device with a build fingerprint of samsung/heroltexx/herolte:8.0.0/R16NW/G930FXXS4ESC3:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000000, versionName=7.0.0.0 that allows other pre-installed apps to...

CVE-2019-15444

CVE-2019-15444 affects Samsung S7 on Android 8.0 where a pre-installed app, com.samsung.android.themecenter, exports capabilities that allow other pre-installed apps to perform app installation. The issue stems from the themecenter component, enabling access for apps that can obtain signatureOrSy...

CVE-2019-15443

The Samsung J7 Max Android device with a build fingerprint of samsung/j7maxlteins/j7maxlte:8.1.0/M1AJQ/G615FXXU2BSB1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000100, versionName=7.0.1.0 that allows other pre-installed...

CVE-2019-15441

The CVE-2019-15441 entry concerns a Samsung on7xeltelgt device with a pre-installed com.samsung.android.themecenter (v7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible component. The root cause is that exported capabilities in the themecenter app can be i...

CVE-2019-15440

The Samsung J5 Android device with a build fingerprint of samsung/on5xeltedx/on5xelte:8.0.0/R16NW/G570YDXU2CRL1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=6010000, versionName=6.1.0.0 that allows other pre-installed apps t...

CVE-2019-15440

The CVE-2019-15440 entry concerns Samsung Galaxy J5 devices (build samsung/on5xeltedx/on5xelte:8.0.0...) where a pre-installed app, com.samsung.android.themecenter (versionCode 6010000, versionName 6.1.0.0), exposes a component that allows other pre-installed apps to install apps. The exploit pat...

CVE-2019-15439

The connected records confirm CVE-2019-15439 affects Samsung XCover4 devices (android 8.1) via a pre-installed com.samsung.android.themecenter app (v7.0.1.0). The flaw allows other pre-installed apps to install apps through an exposed component; access is possible to any pre-installed app that ca...

CVE-2019-15439

The Samsung XCover4 Android device with a build fingerprint of samsung/xcover4ltedo/xcover4lte:8.1.0/M1AJQ/G390YDXU2BSA1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000100, versionName=7.0.1.0 that allows other pre-install...

CVE-2019-15438

CVE-2019-15438 affects Samsung XCover4 running Android 8.1.0 (build samsung/xcover4ltedo/xcover4lte). A pre-installed app, com.samsung.android.themecenter (v7.0.1.0), exposes a component that lets other pre-installed apps perform app installation. Any pre-installed app with signatureOrSystem perm...

CVE-2019-15438

The Samsung XCover4 Android device with a build fingerprint of samsung/xcover4ltedo/xcover4lte:8.1.0/M1AJQ/G390YDXU2BSA1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000100, versionName=7.0.1.0 that allows other pre-install...

CVE-2019-15437

The CVE-2019-15437 entry describes a vulnerability in the Samsung XCover4 running Android 8.1 where a pre-installed app (com.samsung.android.themecenter, v7.0.1.0) exposes an app component that allows other pre-installed apps to perform app installations. This can be accessed by any pre-installed...

CVE-2019-15437

The Samsung XCover4 Android device with a build fingerprint of samsung/xcover4ltexx/xcover4lte:8.1.0/M1AJQ/G390FXXU3BSA2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000100, versionName=7.0.1.0 that allows other pre-install...

CVE-2019-15436

The Samsung A8+ Android device with a build fingerprint of samsung/jackpot2ltexx/jackpot2lte:8.0.0/R16NW/A730FXXS4BSC2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000000, versionName=7.0.0.0 that allows other pre-installed...

CVE-2019-15435

The CVE-2019-15435 entry concerns a Samsung A7 (build samsung/a7y17ltexx/a7y17lte:8.0.0/R16NW/A720FXXU7CSC2:user/release-keys) pre-installed themecenter component (com.samsung.android.themecenter) that lets other pre-installed apps install software via an accessible app component. The risk arises...

CVE-2019-15435

The Samsung A7 Android device with a build fingerprint of samsung/a7y17ltexx/a7y17lte:8.0.0/R16NW/A720FXXU7CSC2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000000, versionName=7.0.0.0 that allows other pre-installed apps t...

CVE-2019-15434

The Samsung A5 Android device with a build fingerprint of samsung/a5y17ltexx/a5y17lte:8.0.0/R16NW/A520FXXS8CSC5:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000000, versionName=7.0.0.0 that allows other pre-installed apps t...

CVE-2019-15434

The CVE-2019-15434 entry concerns a Samsung A5 device running Android 8.0 where a pre-installed app, com.samsung.android.themecenter (versionCode 7000000, versionName 7.0.0.0), exports an app component that can be misused by any pre-installed app possessing signatureOrSystem permissions to perfor...

CVE-2019-15433

The Samsung A3 Android device with a build fingerprint of samsung/a3y17ltedx/a3y17lte:8.0.0/R16NW/A320YDXU4CSB3:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000000, versionName=7.0.0.0 that allows other pre-installed apps t...

CVE-2019-15432

Affected product: Evercoss U6 Android device (build EVERCOSS/U6/U6:7.0/NRD90M/1504236704:user/release-keys). Issue: a pre-installed app (com.qiku.cleaner, versionCode 2, versionName 2.0.0_VER_32516486284094) lets other pre-installed apps modify system properties through an exported component, acc...

CVE-2019-15431

The Evercoss U50A Android device with a build fingerprint of EVERCOSS/U50A./EVERCOSS:7.0/NRD90M/1499911028:eng/test-keys contains a pre-installed app with a package name of com.qiku.cleaner app versionCode=2, versionName=2.0VER2017.04.2117:55:55 that allows other pre-installed apps to perform...