CVE-2019-15417

The Tecno Spark Pro Android device with a build fingerprint of TECNO/H3722/TECNO-K8:7.0/NRD90M/K8-H3722ABCDE-N-171229V96:user/release-keys contains a pre-installed app with a package name of com.lovelyfont.defcontainer app versionCode=7, versionName=7.0.5 that allows unauthorized dynamic code...

CVE-2019-15417

The CVE-2019-15417 entry concerns a Tecno Spark Pro Android device (build TECNO/H3722/TECNO-K8:7.0/NRD90M/K8-H3722ABCDE-N-171229V96:user/release-keys) with a pre-installed app, com.lovelyfont.defcontainer (versionCode 7, versionName 7.0.5), that allows unauthorized dynamic code loading via a conf...

CVE-2019-15355

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify ...

CVE-2019-15355

The CVE-2019-15355 entry concerns Tecno Camon iClick devices (build TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys) where a pre-installed app with package name com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0) exposes an interface that allows any co-located app to modify ...

CVE-2019-15351

The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service named...

CVE-2019-15351

CVE-2019-15351 affects Tecno Camon devices with build TECNO/H622/TECNO-ID5b:8.1.0. A pre-installed platform app com.lovelyfont.defcontainer v7.0.11 exposes FontCoverService, an exported service that lets co-located apps send shell commands executed as the system user by writing a message to logca...

CVE-2019-15350

The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service named...

CVE-2019-15350

The CVE-2019-15350 entry describes a vulnerability on Tecno Camon Android devices where a pre-installed platform app (com.lovelyfont.defcontainer, versionCode 7) exposes an exported service (com.lovelyfont.manager.service.FunctionService) that allows any local app to supply a Dex file path, which...

CVE-2019-15349

The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service named...

CVE-2019-15349

The CVE-2019-15349 entry describes a pre-installed platform app on Tecno Camon devices (package com.lovelyfont.defcontainer, version 7.0.11) that exposes an exported service (com.lovelyfont.manager.service.FunctionService). This service accepts a file path to a Dalvik Executable (DEX) file from a...

CVE-2019-15348

The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service named...

CVE-2019-15348

CVE-2019-15348 affects Tecno Camon Android devices that include a pre-installed platform app com.lovelyfont.defcontainer (FontCoverService). The exported service allows any co-located app to pass arbitrary shell-script commands to be executed as the system user when triggered via a logcat message...

CVE-2019-15347

The CVE-2019-15347 entry details a pre-installed platform app on Tecno Camon iClick 2 (build TECNO/H622/…/8.1.0) named com.lovelyfont.defcontainer (version 7.0.11) that exposes an exported service, FontCoverService. This service allows any co-located app to send arbitrary shell-commands to be exe...

CVE-2019-15347

The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service...

CVE-2019-15346

The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service...

CVE-2019-15346

CVE-2019-15346 affects Tecno Camon iClick 2 devices (TECNO/H622/TECNO-ID6:8.1.0, user/release-keys) due to a pre-installed platform app com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11) that exposes an exported service com.lovelyfont.manager.service.FunctionService. The service enab...

CVE-2019-15345

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.8. This app contains an exported service named...

CVE-2019-15345

The CVE-2019-15345 issue affects the Tecno Camon iClick. A pre-installed platform app com.lovelyfont.defcontainer (versionCode 7, versionName 7.0.8) exposes an exported service com.lovelyfont.manager.service.FunctionService that lets any co-located app supply a path to a Dex file, which it will d...

CVE-2019-15344

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.8. This app contains an exported service named...

CVE-2019-15344

CVE-2019-15344 affects the Tecno Camon iClick Android device. A pre-installed platform app with package name com.lovelyfont.defcontainer (versionCode 7, versionName 7.0.8) exposes an exported service com.lovelyfont.manager.FontCoverService that allows any co-located app to send arbitrary commands...