CVE-2019-15382

CVE-2019-15382 affects the Cubot Nova Android device via a pre-installed app com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0). The root cause is an exported interface on this package that allows any co-located app to modify a system property without proper authorization, enabling local p...