Code injection

The Evercoss U50A Android device with a build fingerprint of EVERCOSS/U50A./EVERCOSS:7.0/NRD90M/1499911028:eng/test-keys contains a pre-installed app with a package name of com.qiku.cleaner app versionCode=2, versionName=2.0VER2017.04.2117:55:55 that allows other pre-installed apps to perform...

Authorization

The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system propert...

Authorization

The Haier P10 Android device with a build fingerprint of Haier/P10/P10:8.1.0/O11019/1532662449:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system property...

Design/Logic Flaw

The Bluboo D3 Pro Android device with a build fingerprint of BLUBOO/BlubooD2Pro/BlubooD2Pro:7.0/NRD90M/1510370501:user/release-keys contains a pre-installed app with a package name of com.qiku.cleaner app versionCode=2, versionName=2.0.0VER32516508295515 that allows other pre-installed apps to...

Authorization

The Infinix Note 5 Android device with a build fingerprint of Infinix/H633B/Infinix-X604sprout:8.1.0/O11019/L-IN-180206V64:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device...

Authorization

The Elephone A4 Android device with a build fingerprint of Elephone/A4/A4:8.1.0/O11019/20180530.143559:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system...

Authorization

The Panasonic Eluga Ray 600 Android device with a build fingerprint of Panasonic/ELUGARay600/ELUGARay600:8.1.0/O11019/1532692680:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the...

Code injection

The Evercoss U6 Android device with a build fingerprint of EVERCOSS/U6/U6:7.0/NRD90M/1504236704:user/release-keys contains a pre-installed app with a package name of com.qiku.cleaner app versionCode=2, versionName=2.0.0VER32516486284094 that allows other pre-installed apps to perform system...

Authorization

The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WWPhone/ASUSX00LD1:8.1.0/OPM1.171019.011/15.0400.1809.405-0:user/release-keys contains a pre-installed app with a package name of com.log.logservice app versionCode=1, versionName=1 that allows any app co-located on the...

CVE-2019-15432

Affected product: Evercoss U6 Android device (build EVERCOSS/U6/U6:7.0/NRD90M/1504236704:user/release-keys). Issue: a pre-installed app (com.qiku.cleaner, versionCode 2, versionName 2.0.0_VER_32516486284094) lets other pre-installed apps modify system properties through an exported component, acc...

CVE-2019-15431

This CVE (CVE-2019-15431) affects the Evercoss U50A Android device. The issue centers on a pre-installed app, com.qiku.cleaner (versionCode=2, versionName=2.0_VER_2017.04.21_17:55:55), which allows other pre-installed apps to perform system properties modification via an accessible component. The...

CVE-2019-15430

The Bluboo D3 Pro Android device with a build fingerprint of BLUBOO/BlubooD2Pro/BlubooD2Pro:7.0/NRD90M/1510370501:user/release-keys contains a pre-installed app with a package name of com.qiku.cleaner app versionCode=2, versionName=2.0.0VER32516508295515 that allows other pre-installed apps to...

CVE-2019-15430

The CVE-2019-15430 entry concerns the Bluboo D3 Pro Android device. A pre-installed app (package: com.qiku.cleaner, versionCode=2, versionName=2.0.0_VER_32516508295515) exposes functionality that lets other pre-installed apps modify system properties through an accessible component. This can be e...

CVE-2019-15391

The CVE-2019-15391 entry concerns the Asus ZenFone 4 Selfie. A pre-installed app with package name com.log.logservice (versionCode=1, versionName=1) exposes an interface that allows any app co-located on the device to modify a system property without proper authorization. This is a local-privileg...

CVE-2019-15386

CVE-2019-15386 affects the Lava Z60s Android device (build fingerprint LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys). A pre-installed app, com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0), exposes an interface that allows any co-located app to modify a system property without...

CVE-2019-15384

The Elephone A4 Android device with a build fingerprint of Elephone/A4/A4:8.1.0/O11019/20180530.143559:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system...

CVE-2019-15380

The Fly Photo Pro Android device with a build fingerprint of Fly/PhotoPro/PhotoPro:8.1.0/O11019/1528117003:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a...

CVE-2019-15364

The Dexp BL250 Android device with a build fingerprint of DEXP/BL250/BL250:8.1.0/O11019/1530858027:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system...

CVE-2019-15353

The CVE-2019-15353 entry applies to the Coolpad N3C Android device (build fingerprint Coolpad/N3C/N3C:8.1.0/O11019/1538236809:user/release-keys). A pre-installed app with package name com.mediatek.wfo.impl (versionCode=27, versionName=8.1.0) exposes an interface that allows any co-located app to ...

The vulnerability of the ASF_ReadObject_file_properties function (module/demux/asf/libasf.c) in the media player software VideoLAN VLC allows a hacker to induce a service failure.

The vulnerability of the ASFReadObjectfileproperties function module/demux/asf/libasf.c in the video player software VideoLAN VLC is related to errors in number processing. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created ASF...