CVE-2018-14990

CVE-2018-14990 affects multiple Android devices (Coolpad Defiant, ZTE ZMAX Pro, T-Mobile Revvl Plus) due to a pre-installed Rich Communication Services (RCS) app. The vulnerable components include a package named com.suntek.mway.rcs.app.service (with a TestReceiver broadcast receiver) and a refac...

CVE-2018-14991

CVE-2018-14991 affects Coolpad Defiant, ZTE ZMAX Pro, and T-Mobile Revvl Plus due to a pre-installed Rich Communication Services (RCS) app. The vulnerable components include an app with package name com.suntek.mway.rcs.app.service (exported MessageProvider) and a refactored version com.rcs.gsma.n...

CVE-2018-15003

CVE-2018-15003 affects Coolpad Defiant and T-Mobile Revvl Plus devices with a pre-installed platform app com.qualcomm.qti.telephony.extcarrierpack (versionCode=25, versionName=7.1.1) containing an exported UiccReceiver that allows any app on the device to trigger a factory reset. The initiating a...