Authorization

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify...

Authorization

The Infinix Note 5 Android device with a build fingerprint of Infinix/H632C/Infinix-X605sprout:8.1.0/O11019/CE-180914V59:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device t...

Authorization

The Leagoo Power 5 Android device with a build fingerprint of LEAGOO/Power5/Power5:8.1.0/O11019/1532686195:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a...

Authorization

The Coolpad N3C Android device with a build fingerprint of Coolpad/N3C/N3C:8.1.0/O11019/1538236809:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system...

CVE-2019-15392

The Asus ZenFone 4 Selfie Android device with a build fingerprint of Android/sdm66064/sdm66064:8.1.0/OPM1/14.2016.1802.247-20180419:user/release-keys contains a pre-installed app with a package name of com.log.logservice app versionCode=1, versionName=1 that allows any app co-located on the devic...

CVE-2019-15385

The Infinix Note 5 Android device with a build fingerprint of Infinix/H633B/Infinix-X604sprout:8.1.0/O11019/L-IN-180206V64:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device...

CVE-2019-15385

The CVE-2019-15385 issue affects the Infinix Note 5 running Android, where a pre-installed app (package com.mediatek.wfo.impl, versionCode 27, versionName 8.1.0) exposes an exported interface that allows any co-located app to modify a system property without proper authorization. This is tied to ...

CVE-2019-15384

CVE-2019-15384 affects the Elephone A4 Android device. A pre-installed component com.mediatek.wfo.impl exposes an interface that allows any app co-located on the device to modify a system property without proper authorization. Root cause: an exported interface without adequate access controls. Im...

CVE-2019-15383

The CVE-2019-15383 entry concerns the Allview X5 Android device (build ALLVIEW/X5_Soul_Mini/X5_Soul_Mini:8.1.0/O11019/1522468763:userdebug/release-keys). A pre-installed component, package com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0), exposes an interface that allows any co-located a...

CVE-2019-15382

CVE-2019-15382 affects the Cubot Nova Android device via a pre-installed app com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0). The root cause is an exported interface on this package that allows any co-located app to modify a system property without proper authorization, enabling local p...

CVE-2019-15381

CVE-2019-15381 affects the BQ 5515L Android device (build fingerprint BQru/BQru-5515L/BQru-5515L:8.1.0/O11019/20180409.195525:user/release-keys). It involves a pre-installed app with package name com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0) that allows any app co-located on the devic...

CVE-2019-15378

The Panasonic Eluga Ray 600 Android device with a build fingerprint of Panasonic/ELUGARay600/ELUGARay600:8.1.0/O11019/1532692680:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the...

CVE-2019-15378

CVE-2019-15378 affects the Panasonic Eluga Ray 600 on Android 8.1.0. A pre-installed app (package: com.mediatek.wfo.impl, v27, 8.1.0) exposes an interface that allows any co-located app to modify a system property without proper authorization via an exported interface. This is a local issue with ...

CVE-2019-15376

The CVE-2019-15376 issue affects the Panasonic Eluga Ray 530 Android device. A pre-installed app (package: com.mediatek.wfo.impl, versionCode 27, versionName 8.1.0) exposes an interface that allows any co-located app to modify a system property without proper authorization. Root cause: exported i...

CVE-2019-15374

The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88lite/iris88lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to...

CVE-2019-15373

The Symphony i95 Lite Android device with a build fingerprint of LAVA/iris88lite/iris88lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to...

CVE-2019-15370

The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1526527761:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system...

CVE-2019-15369

The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61Turbo/Z61Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a...

CVE-2019-15368

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify...

CVE-2019-15366

The Infinix Note 5 Android device with a build fingerprint of Infinix/H633IJL/Infinix-X604sprout:8.1.0/O11019/IJL-180531V181:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the devi...