CVE-2019-15384

CVE-2019-15384 affects the Elephone A4 Android device. A pre-installed component com.mediatek.wfo.impl exposes an interface that allows any app co-located on the device to modify a system property without proper authorization. Root cause: an exported interface without adequate access controls. Im...

CVE-2019-15383

The CVE-2019-15383 entry concerns the Allview X5 Android device (build ALLVIEW/X5_Soul_Mini/X5_Soul_Mini:8.1.0/O11019/1522468763:userdebug/release-keys). A pre-installed component, package com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0), exposes an interface that allows any co-located a...

CVE-2019-15383

The Allview X5 Android device with a build fingerprint of ALLVIEW/X5SoulMini/X5SoulMini:8.1.0/O11019/1522468763:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to...

CVE-2019-15382

The Cubot Nova Android device with a build fingerprint of CUBOT/CUBOTNOVA/CUBOTNOVA:8.1.0/O11019/1527060122:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a...

CVE-2019-15382

CVE-2019-15382 affects the Cubot Nova Android device via a pre-installed app com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0). The root cause is an exported interface on this package that allows any co-located app to modify a system property without proper authorization, enabling local p...

CVE-2019-15381

The BQ 5515L Android device with a build fingerprint of BQru/BQru-5515L/BQru-5515L:8.1.0/O11019/20180409.195525:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify ...

CVE-2019-15381

CVE-2019-15381 affects the BQ 5515L Android device (build fingerprint BQru/BQru-5515L/BQru-5515L:8.1.0/O11019/20180409.195525:user/release-keys). It involves a pre-installed app with package name com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0) that allows any app co-located on the devic...

CVE-2019-15378

CVE-2019-15378 affects the Panasonic Eluga Ray 600 on Android 8.1.0. A pre-installed app (package: com.mediatek.wfo.impl, v27, 8.1.0) exposes an interface that allows any co-located app to modify a system property without proper authorization via an exported interface. This is a local issue with ...

CVE-2019-15378

The Panasonic Eluga Ray 600 Android device with a build fingerprint of Panasonic/ELUGARay600/ELUGARay600:8.1.0/O11019/1532692680:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the...

CVE-2019-15377

The Cherry Flare S7 Android device with a build fingerprint of CherryMobile/FlareS7Deluxe/FlareS7Deluxe:8.1.0/O11019/1533920920:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the...

CVE-2019-15376

The CVE-2019-15376 issue affects the Panasonic Eluga Ray 530 Android device. A pre-installed app (package: com.mediatek.wfo.impl, versionCode 27, versionName 8.1.0) exposes an interface that allows any co-located app to modify a system property without proper authorization. Root cause: exported i...

CVE-2019-15376

The Panasonic Eluga Ray 530 Android device with a build fingerprint of Panasonic/ELUGARay530/ELUGARay530:8.1.0/O11019/1531828974:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the...

CVE-2019-15375

The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1522294799:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system...

CVE-2019-15375

The CVE-2019-15375 entry concerns the Haier G8 Android device (build Haier/HM-G559-FL/G8:8.1.0/O11019/1522294799:user/release-keys). A pre-installed app with package name com.mediatek.wfo.impl (versionCode=27, versionName=8.1.0) exposes an interface that allows any co-located app to modify a syst...

CVE-2019-15374

The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88lite/iris88lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to...

CVE-2019-15374

CVE-2019-15374 affects the Lava Iris 88 Lite Android device (build fingerprint LAVA/iris88_lite/iris88_lite:8.1.0...). A pre-installed app with package name com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0) exposes an interface that allows any co-located app to modify a system property wi...

CVE-2019-15373

The Symphony i95 Lite Android device with a build fingerprint of LAVA/iris88lite/iris88lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to...

CVE-2019-15372

The Hisense F17 Android device with a build fingerprint of Hisense/F174G/HS6739MT:8.1.0/O11019/HisenseF174G00S01:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify...

CVE-2019-15372

The CVE-2019-15372 entry concerns the Hisense F17 Android device, where a pre-installed app (package: com.mediatek.wfo.impl, versionCode 27, versionName 8.1.0) exposes an interface that lets any co-located app modify a system property without proper authorization. This is a local vulnerability wi...

CVE-2019-15371

The CVE-2019-15371 entry concerns the Symphony G100 Android device (build Symphony/G100/G100:8.1.0) with a pre-installed app package com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0). The issue is that this exported interface allows any co-located app on the device to modify a system prop...