Skip to main content

Google

18157 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2019-15404 Nov 14, 17:15 HIGH This Week

The Asus ZenFone Max 4 Android device with a build fingerprint of asus/WW_Phone/ASUS_X00HD_4:7.1.1/NMF26F/14.2016.1712.367-20171225:user/release-keys contains a pre-installed app with a package name. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 4 Max Firmware Asus
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15403 Nov 14, 17:15 HIGH This Week

The Asus ZenFone 3s Max Android device with a build fingerprint of asus/IN_X00G/ASUS_X00G_1:7.0/NRD90M/IN_X00G-14.02.1807.33-20180706:user/release-keys contains a pre-installed app with a package. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 3S Max Firmware Asus
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15402 Nov 14, 17:15 HIGH This Week

The Asus ASUS_A002_2 Android device with a build fingerprint of asus/WW_ASUS_A002_2/ASUS_A002_2:7.0/NRD90M/14.1610.1802.18-20180321:user/release-keys contains a pre-installed app with a package name. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone Ar Firmware Asus
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15401 Nov 14, 17:15 HIGH This Week

The Asus ASUS_A002 Android device with a build fingerprint of asus/WW_ASUS_A002/ASUS_A002:7.0/NRD90M/14.1600.1805.51-20180626:user/release-keys contains a pre-installed app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone Ar Firmware Asus
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15400 Nov 14, 17:15 HIGH This Week

The Asus ZenFone 3 Ultra Android device with a build fingerprint of asus/WW_Phone/ASUS_A001:7.0/NRD90M/14.1010.1804.75-20180612:user/release-keys contains a pre-installed app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 3 Ultra Firmware Asus
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15399 Nov 14, 17:15 HIGH This Week

The Asus ZenFone 5Q Android device with a build fingerprint of asus/WW_Phone/ASUS_X017D_2:7.1.1/NGI77B/14.0400.1809.059-20181016:user/release-keys contains a pre-installed app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 5Q Firmware Asus
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15398 Nov 14, 17:15 HIGH This Week

The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW_Z01M/ASUS_Z01M_1:7.1.1/NMF26F/WW_user_11.40.208.77_20170922:user/release-keys contains a pre-installed app with a package. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 4 Selfie Firmware Asus
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15397 Nov 14, 17:15 HIGH This Week

The Asus ZenFone Max 4 Android device with a build fingerprint of asus/WW_Phone/ASUS_X00HD_4:7.1.1/NMF26F/14.2016.1803.373-20180308:user/release-keys contains a pre-installed app with a package name. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone Max 4 Firmware Asus
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15396 Nov 14, 17:15 HIGH This Week

The Asus ZenFone 3 Android device with a build fingerprint of asus/WW_Phone/ASUS_Z012D:7.0/NRD90M/14.2020.1708.56-20170719:user/release-keys contains a pre-installed app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 3 Firmware Asus
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15395 Nov 14, 17:15 HIGH This Week

The Asus ZenFone 3s Max Android device with a build fingerprint of asus/IN_X00G/ASUS_X00G_1:7.0/NRD90M/IN_X00G-14.02.1807.33-20180706:user/release-keys contains a pre-installed app with a package. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 3S Max Firmware Asus
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15394 Nov 14, 17:15 HIGH This Week

The Asus ZenFone 5 Selfie Android device with a build fingerprint of asus/WW_Phone/ASUS_X017D_1:7.1.1/NMF26F/14.0400.1810.061-20181107:user/release-keys contains a pre-installed app with a package. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Google Zenfone 5 Selfie Firmware Asus
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2019-15393 Nov 14, 17:15 LOW Monitor

The Asus ZenFone Live Android device with a build fingerprint of asus/WW_Phone/ASUS_X00LD_3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/release-keys contains a pre-installed app with a package name. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Google Zenfone Live L1 Firmware Asus
NVD
CVSS 3.1
3.3
EPSS
0.3%
CVE-2019-15392 Nov 14, 17:15 MEDIUM This Month

The Asus ZenFone 4 Selfie Android device with a build fingerprint of Android/sdm660_64/sdm660_64:8.1.0/OPM1/14.2016.1802.247-20180419:user/release-keys contains a pre-installed app with a package. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 4 Selfie Firmware Asus
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15391 Nov 14, 17:15 MEDIUM This Month

The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW_Phone/ASUS_X00LD_1:8.1.0/OPM1.171019.011/15.0400.1809.405-0:user/release-keys contains a pre-installed app with a package. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 4 Selfie Firmware Asus
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15390 Nov 14, 17:15 MEDIUM This Month

The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1522294799:user/release-keys contains a pre-installed app with a package name of com.qiku.service.container. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Haier G8 Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15389 Nov 14, 17:15 HIGH This Week

The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Google Haier A6 Firmware
NVD
CVSS 3.1
8.1
EPSS
1.1%
CVE-2019-15388 Nov 14, 17:15 HIGH This Week

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Google Code Injection Mega 5 Firmware Coolpad
NVD
CVSS 3.1
8.1
EPSS
1.1%
CVE-2019-15387 Nov 14, 17:15 LOW Monitor

The Archos Core 101 Android device with a build fingerprint of archos/MTKAC101CR3G_ARCHOS/ac101cr3g:7.0/NRD90M/20180611.034442:user/release-keys contains a pre-installed app with a package name of. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Google Core 101 Firmware
NVD
CVSS 3.1
3.3
EPSS
0.2%
CVE-2019-15386 Nov 14, 17:15 MEDIUM This Month

The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Google Mediatek Z60S Firmware Lavamobiles
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2019-15385 Nov 14, 17:15 MEDIUM This Month

The Infinix Note 5 Android device with a build fingerprint of Infinix/H633B/Infinix-X604_sprout:8.1.0/O11019/L-IN-180206V64:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Note 5 Firmware Infinixmobility
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15384 Nov 14, 17:15 MEDIUM This Month

The Elephone A4 Android device with a build fingerprint of Elephone/A4/A4:8.1.0/O11019/20180530.143559:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek A4 Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15383 Nov 14, 17:15 MEDIUM This Month

The Allview X5 Android device with a build fingerprint of ALLVIEW/X5_Soul_Mini/X5_Soul_Mini:8.1.0/O11019/1522468763:userdebug/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Soul X5 Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15382 Nov 14, 17:15 MEDIUM This Month

The Cubot Nova Android device with a build fingerprint of CUBOT/CUBOT_NOVA/CUBOT_NOVA:8.1.0/O11019/1527060122:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Nova Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15381 Nov 14, 17:15 MEDIUM This Month

The BQ 5515L Android device with a build fingerprint of BQru/BQru-5515L/BQru-5515L:8.1.0/O11019/20180409.195525:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek 5515L Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15380 Nov 14, 17:15 MEDIUM This Month

The Fly Photo Pro Android device with a build fingerprint of Fly/PhotoPro/Photo_Pro:8.1.0/O11019/1528117003:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Photo Pro Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15379 Nov 14, 17:15 MEDIUM This Month

The Walton Primo G3 Android device with a build fingerprint of WALTON/Primo_GM3/Primo_GM3:8.1.0/O11019/1522737198:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Primo G3 Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15378 Nov 14, 17:15 MEDIUM This Month

The Panasonic Eluga Ray 600 Android device with a build fingerprint of Panasonic/ELUGA_Ray_600/ELUGA_Ray_600:8.1.0/O11019/1532692680:user/release-keys contains a pre-installed app with a package name. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Eluga Ray 600 Firmware Panasonic
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15377 Nov 14, 17:15 MEDIUM This Month

The Cherry Flare S7 Android device with a build fingerprint of Cherry_Mobile/Flare_S7_Deluxe/Flare_S7_Deluxe:8.1.0/O11019/1533920920:user/release-keys contains a pre-installed app with a package name. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Flare S7 Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15376 Nov 14, 17:15 MEDIUM This Month

The Panasonic Eluga Ray 530 Android device with a build fingerprint of Panasonic/ELUGA_Ray_530/ELUGA_Ray_530:8.1.0/O11019/1531828974:user/release-keys contains a pre-installed app with a package name. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Eluga Ray 530 Firmware Panasonic
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15375 Nov 14, 17:15 MEDIUM This Month

The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1522294799:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek G8 Firmware Haier
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15374 Nov 14, 17:15 MEDIUM This Month

The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Iris 88 Lite Firmware Lavamobiles
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15373 Nov 14, 17:15 MEDIUM This Month

The Symphony i95 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek I95 Lite Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15372 Nov 14, 17:15 MEDIUM This Month

The Hisense F17 Android device with a build fingerprint of Hisense/F17_4G/HS6739MT:8.1.0/O11019/Hisense_F17_4G_00_S01:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Infinity F17 Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15371 Nov 14, 17:15 MEDIUM This Month

The Symphony G100 Android device with a build fingerprint of Symphony/G100/G100:8.1.0/O11019/1530618779:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek G100 Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15370 Nov 14, 17:15 MEDIUM This Month

The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1526527761:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Haier G8 Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15369 Nov 14, 17:15 MEDIUM This Month

The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61_Turbo/Z61_Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Z61 Turbo Firmware Lavamobiles
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15368 Nov 14, 17:15 MEDIUM This Month

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Mega 5 Firmware Coolpad
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15367 Nov 14, 17:15 MEDIUM This Month

The Haier P10 Android device with a build fingerprint of Haier/P10/P10:8.1.0/O11019/1532662449:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek P10 Firmware Haier
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15366 Nov 14, 17:15 MEDIUM This Month

The Infinix Note 5 Android device with a build fingerprint of Infinix/H633IJL/Infinix-X604_sprout:8.1.0/O11019/IJL-180531V181:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Note 5 Firmware Infinixmobility
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15365 Nov 14, 17:15 MEDIUM This Month

The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Z92 Firmware Lavamobiles
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15364 Nov 14, 17:15 MEDIUM This Month

The Dexp BL250 Android device with a build fingerprint of DEXP/BL250/BL250:8.1.0/O11019/1530858027:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Bl250 Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15363 Nov 14, 17:15 MEDIUM This Month

The Leagoo Power 5 Android device with a build fingerprint of LEAGOO/Power_5/Power_5:8.1.0/O11019/1532686195:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Power 5 Firmware Leagoo
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15362 Nov 14, 17:15 MEDIUM This Month

The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88_go/iris88_go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Iris 88 Firmware Lavamobiles
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15361 Nov 14, 17:15 MEDIUM This Month

The Infinix Note 5 Android device with a build fingerprint of Infinix/H632C/Infinix-X605_sprout:8.1.0/O11019/CE-180914V59:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Note 5 Firmware Infinixmobility
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15360 Nov 14, 17:15 MEDIUM This Month

The Hisense U965 Android device with a build fingerprint of Hisense/U965_4G_10/HS6739MT:8.1.0/O11019/Hisense_U965_4G_10_S01:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Infinity U965 Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15359 Nov 14, 17:15 MEDIUM This Month

The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek A6 Firmware Haier
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15358 Nov 14, 17:15 MEDIUM This Month

The Dexp Z250 Android device with a build fingerprint of DEXP/Z250/Z250:8.1.0/O11019/1531130719:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Z250 Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15357 Nov 14, 17:15 MEDIUM This Month

The Advan i6A Android device with a build fingerprint of ADVAN/i6A/i6A:8.1.0/O11019/1523602705:userdebug/test-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek I6A Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15356 Nov 14, 17:15 MEDIUM This Month

The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Flair Z1 Firmware Lavamobiles
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15355 Nov 14, 17:15 MEDIUM This Month

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Camon Iclick Firmware Tecno Mobile
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15354 Nov 14, 17:15 MEDIUM This Month

The Ulefone Armor 5 Android device with a build fingerprint of Ulefone/Ulefone_Armor_5/Ulefone_Armor_5:8.1.0/O11019/1528806701:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Armor 5 Firmware
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15353 Nov 14, 17:15 MEDIUM This Month

The Coolpad N3C Android device with a build fingerprint of Coolpad/N3C/N3C:8.1.0/O11019/1538236809:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek N3C Firmware Coolpad
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15352 Nov 14, 17:15 MEDIUM This Month

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek Mega 5 Firmware Coolpad
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-15351 Nov 14, 17:15 HIGH This Week

The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Google Command Injection Tecno H622 Tecno Id5B Tecno Mobile
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15350 Nov 14, 17:15 HIGH This Week

The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Tecno H622 Tecno Id5B Tecno Mobile
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2019-15349 Nov 14, 17:15 HIGH This Week

The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Tecno H612 Tecno Id5A Tecno Mobile
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15348 Nov 14, 17:15 HIGH This Week

The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Google Command Injection Tecno H612 Tecno Id5A Tecno Mobile
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15347 Nov 14, 17:15 HIGH This Week

The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Google Command Injection Camon Iclick 2 Firmware Tecno Mobile
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15346 Nov 14, 17:15 HIGH This Week

The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Camon Iclick 2 Firmware Tecno Mobile
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2019-15345 Nov 14, 17:15 HIGH This Week

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Camon Iclick Firmware Tecno Mobile
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2019-15344 Nov 14, 17:15 HIGH This Week

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Google Camon Iclick Firmware Tecno Mobile
NVD
CVSS 3.1
8.1
EPSS
1.1%
CVE-2019-15343 Nov 14, 17:15 HIGH This Week

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Google Command Injection Camon Iclick Firmware Tecno Mobile
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15342 Nov 14, 17:15 HIGH This Week

The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Google Command Injection Camon Iair 2 Firmware Tecno Mobile
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2019-15341 Nov 14, 17:15 HIGH This Week

The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Camon Iair 2 Firmware Tecno Mobile
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2019-15340 Nov 14, 17:15 LOW Monitor

The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V9.6.4.0.ODMMIFD:user/release-keys contains a pre-installed app with a package. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Redmi 6 Firmware Mi
NVD
CVSS 3.1
3.3
EPSS
0.3%
CVE-2019-15339 Nov 14, 17:15 LOW Monitor

The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Z60S Firmware Lavamobiles
NVD
CVSS 3.1
3.3
EPSS
0.2%
CVE-2019-15338 Nov 14, 17:15 LOW Monitor

The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Iris 88 Firmware Lavamobiles
NVD
CVSS 3.1
3.3
EPSS
0.2%
CVE-2019-15337 Nov 14, 17:15 LOW Monitor

The Lava Z81 Android device with a build fingerprint of LAVA/Z81/Z81:8.1.0/O11019/1532317309:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Z81 Firmware Lavamobiles
NVD
CVSS 3.1
3.3
EPSS
0.2%
CVE-2019-15336 Nov 14, 17:15 LOW Monitor

The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61_Turbo/Z61_Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Z61 Firmware Lavamobiles
NVD
CVSS 3.1
3.3
EPSS
0.2%
CVE-2019-15335 Nov 14, 17:15 LOW Monitor

The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Z92 Firmware Lavamobiles
NVD
CVSS 3.1
3.3
EPSS
0.2%
CVE-2019-15334 Nov 14, 17:15 LOW Monitor

The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88_go/iris88_go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Iris 88 Firmware Lavamobiles
NVD
CVSS 3.1
3.3
EPSS
0.2%
CVE-2019-15333 Nov 14, 17:15 LOW Monitor

The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Flair Z1 Firmware Lavamobiles
NVD
CVSS 3.1
3.3
EPSS
0.2%
CVE-2019-15332 Nov 14, 17:15 LOW Monitor

The Lava Z61 Android device with a build fingerprint of LAVA/Z61_2GB/Z61_2GB:8.1.0/O11019/1533889281:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Google Z61 Firmware Lavamobiles
NVD
CVSS 3.1
3.3
EPSS
0.2%
CVE-2019-9467 Nov 13, 20:15 MEDIUM This Month

In the Bootloader, there is a possible kernel command injection due to missing command sanitization. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Google Command Injection Android
NVD
CVSS 3.1
6.7
EPSS
0.3%
CVE-2019-2210 Nov 13, 20:15 HIGH This Week

In load_logging_config of qmi_vs_service.cc, there is a possible out of bounds write due to a heap buffer overflow. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2019-2233 Nov 13, 18:15 MEDIUM This Month

In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Google Android
NVD
CVSS 3.1
6.8
EPSS
0.2%
CVE-2019-2214 Nov 13, 18:15 HIGH This Week

In binder_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android +2
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2019-2213 Nov 13, 18:15 HIGH This Week

In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. Rated high severity (CVSS 7.4), this vulnerability is no authentication required. No vendor patch available.

Privilege Escalation Google Race Condition Android
NVD
CVSS 3.1
7.4
EPSS
0.1%
CVE-2019-2212 Nov 13, 18:15 MEDIUM This Month

In poisson_distribution of random, there is an out of bounds read. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2019-2211 Nov 13, 18:15 HIGH This Week

In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure SQLi Google Android
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2019-2209 Nov 13, 18:15 MEDIUM This Month

In BTA_DmPinReply of bta_dm_api.cc, there is a possible out of bounds read due to an incorrect bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2019-2208 Nov 13, 18:15 HIGH This Week

In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 JIT code due to a bug in code generation. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
7.5
EPSS
1.0%
CVE-2019-2207 Nov 13, 18:15 HIGH This Week

In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc, there is a possible out of bound write due to missing bounds checks. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2019-2206 Nov 13, 18:15 HIGH This Week

In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2019-2205 Nov 13, 18:15 CRITICAL Act Now

In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Google Use After Free +2
NVD
CVSS 3.1
9.8
EPSS
2.9%
CVE-2019-2204 Nov 13, 18:15 CRITICAL Act Now

In FindSharedFunctionInfo of objects.cc, there is a possible out of bounds read due to a mistake in AST traversal. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
9.8
EPSS
1.3%
CVE-2019-2203 Nov 13, 18:15 HIGH This Week

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2019-2202 Nov 13, 18:15 HIGH This Week

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2019-2201 Nov 13, 18:15 HIGH This Week

In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Google Memory Corruption Android +2
NVD
CVSS 3.1
7.8
EPSS
2.5%
CVE-2019-2199 Nov 13, 18:15 MEDIUM This Month

In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Google Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2019-15404
EPSS 0% CVSS 7.8
HIGH This Week

The Asus ZenFone Max 4 Android device with a build fingerprint of asus/WW_Phone/ASUS_X00HD_4:7.1.1/NMF26F/14.2016.1712.367-20171225:user/release-keys contains a pre-installed app with a package name. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 4 Max Firmware +1
NVD
CVE-2019-15403
EPSS 0% CVSS 7.8
HIGH This Week

The Asus ZenFone 3s Max Android device with a build fingerprint of asus/IN_X00G/ASUS_X00G_1:7.0/NRD90M/IN_X00G-14.02.1807.33-20180706:user/release-keys contains a pre-installed app with a package. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 3S Max Firmware +1
NVD
CVE-2019-15402
EPSS 0% CVSS 7.8
HIGH This Week

The Asus ASUS_A002_2 Android device with a build fingerprint of asus/WW_ASUS_A002_2/ASUS_A002_2:7.0/NRD90M/14.1610.1802.18-20180321:user/release-keys contains a pre-installed app with a package name. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone Ar Firmware +1
NVD
CVE-2019-15401
EPSS 0% CVSS 7.8
HIGH This Week

The Asus ASUS_A002 Android device with a build fingerprint of asus/WW_ASUS_A002/ASUS_A002:7.0/NRD90M/14.1600.1805.51-20180626:user/release-keys contains a pre-installed app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone Ar Firmware +1
NVD
CVE-2019-15400
EPSS 0% CVSS 7.8
HIGH This Week

The Asus ZenFone 3 Ultra Android device with a build fingerprint of asus/WW_Phone/ASUS_A001:7.0/NRD90M/14.1010.1804.75-20180612:user/release-keys contains a pre-installed app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 3 Ultra Firmware +1
NVD
CVE-2019-15399
EPSS 0% CVSS 7.8
HIGH This Week

The Asus ZenFone 5Q Android device with a build fingerprint of asus/WW_Phone/ASUS_X017D_2:7.1.1/NGI77B/14.0400.1809.059-20181016:user/release-keys contains a pre-installed app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 5Q Firmware +1
NVD
CVE-2019-15398
EPSS 0% CVSS 7.8
HIGH This Week

The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW_Z01M/ASUS_Z01M_1:7.1.1/NMF26F/WW_user_11.40.208.77_20170922:user/release-keys contains a pre-installed app with a package. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 4 Selfie Firmware +1
NVD
CVE-2019-15397
EPSS 0% CVSS 7.8
HIGH This Week

The Asus ZenFone Max 4 Android device with a build fingerprint of asus/WW_Phone/ASUS_X00HD_4:7.1.1/NMF26F/14.2016.1803.373-20180308:user/release-keys contains a pre-installed app with a package name. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone Max 4 Firmware +1
NVD
CVE-2019-15396
EPSS 0% CVSS 7.8
HIGH This Week

The Asus ZenFone 3 Android device with a build fingerprint of asus/WW_Phone/ASUS_Z012D:7.0/NRD90M/14.2020.1708.56-20170719:user/release-keys contains a pre-installed app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 3 Firmware +1
NVD
CVE-2019-15395
EPSS 0% CVSS 7.8
HIGH This Week

The Asus ZenFone 3s Max Android device with a build fingerprint of asus/IN_X00G/ASUS_X00G_1:7.0/NRD90M/IN_X00G-14.02.1807.33-20180706:user/release-keys contains a pre-installed app with a package. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 3S Max Firmware +1
NVD
CVE-2019-15394
EPSS 0% CVSS 7.8
HIGH This Week

The Asus ZenFone 5 Selfie Android device with a build fingerprint of asus/WW_Phone/ASUS_X017D_1:7.1.1/NMF26F/14.0400.1810.061-20181107:user/release-keys contains a pre-installed app with a package. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Google Zenfone 5 Selfie Firmware +1
NVD
CVE-2019-15393
EPSS 0% CVSS 3.3
LOW Monitor

The Asus ZenFone Live Android device with a build fingerprint of asus/WW_Phone/ASUS_X00LD_3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/release-keys contains a pre-installed app with a package name. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Google Zenfone Live L1 Firmware +1
NVD
CVE-2019-15392
EPSS 0% CVSS 5.5
MEDIUM This Month

The Asus ZenFone 4 Selfie Android device with a build fingerprint of Android/sdm660_64/sdm660_64:8.1.0/OPM1/14.2016.1802.247-20180419:user/release-keys contains a pre-installed app with a package. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 4 Selfie Firmware +1
NVD
CVE-2019-15391
EPSS 0% CVSS 5.5
MEDIUM This Month

The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW_Phone/ASUS_X00LD_1:8.1.0/OPM1.171019.011/15.0400.1809.405-0:user/release-keys contains a pre-installed app with a package. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Zenfone 4 Selfie Firmware +1
NVD
CVE-2019-15390
EPSS 0% CVSS 5.5
MEDIUM This Month

The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1522294799:user/release-keys contains a pre-installed app with a package name of com.qiku.service.container. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Haier G8 Firmware
NVD
CVE-2019-15389
EPSS 1% CVSS 8.1
HIGH This Week

The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Google Haier A6 Firmware
NVD
CVE-2019-15388
EPSS 1% CVSS 8.1
HIGH This Week

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Google Code Injection +2
NVD
CVE-2019-15387
EPSS 0% CVSS 3.3
LOW Monitor

The Archos Core 101 Android device with a build fingerprint of archos/MTKAC101CR3G_ARCHOS/ac101cr3g:7.0/NRD90M/20180611.034442:user/release-keys contains a pre-installed app with a package name of. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Google Core 101 Firmware
NVD
CVE-2019-15386
EPSS 0% CVSS 5.5
MEDIUM This Month

The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Google Mediatek +2
NVD
CVE-2019-15385
EPSS 0% CVSS 5.5
MEDIUM This Month

The Infinix Note 5 Android device with a build fingerprint of Infinix/H633B/Infinix-X604_sprout:8.1.0/O11019/L-IN-180206V64:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15384
EPSS 0% CVSS 5.5
MEDIUM This Month

The Elephone A4 Android device with a build fingerprint of Elephone/A4/A4:8.1.0/O11019/20180530.143559:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15383
EPSS 0% CVSS 5.5
MEDIUM This Month

The Allview X5 Android device with a build fingerprint of ALLVIEW/X5_Soul_Mini/X5_Soul_Mini:8.1.0/O11019/1522468763:userdebug/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15382
EPSS 0% CVSS 5.5
MEDIUM This Month

The Cubot Nova Android device with a build fingerprint of CUBOT/CUBOT_NOVA/CUBOT_NOVA:8.1.0/O11019/1527060122:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15381
EPSS 0% CVSS 5.5
MEDIUM This Month

The BQ 5515L Android device with a build fingerprint of BQru/BQru-5515L/BQru-5515L:8.1.0/O11019/20180409.195525:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15380
EPSS 0% CVSS 5.5
MEDIUM This Month

The Fly Photo Pro Android device with a build fingerprint of Fly/PhotoPro/Photo_Pro:8.1.0/O11019/1528117003:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15379
EPSS 0% CVSS 5.5
MEDIUM This Month

The Walton Primo G3 Android device with a build fingerprint of WALTON/Primo_GM3/Primo_GM3:8.1.0/O11019/1522737198:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15378
EPSS 0% CVSS 5.5
MEDIUM This Month

The Panasonic Eluga Ray 600 Android device with a build fingerprint of Panasonic/ELUGA_Ray_600/ELUGA_Ray_600:8.1.0/O11019/1532692680:user/release-keys contains a pre-installed app with a package name. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15377
EPSS 0% CVSS 5.5
MEDIUM This Month

The Cherry Flare S7 Android device with a build fingerprint of Cherry_Mobile/Flare_S7_Deluxe/Flare_S7_Deluxe:8.1.0/O11019/1533920920:user/release-keys contains a pre-installed app with a package name. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15376
EPSS 0% CVSS 5.5
MEDIUM This Month

The Panasonic Eluga Ray 530 Android device with a build fingerprint of Panasonic/ELUGA_Ray_530/ELUGA_Ray_530:8.1.0/O11019/1531828974:user/release-keys contains a pre-installed app with a package name. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15375
EPSS 0% CVSS 5.5
MEDIUM This Month

The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1522294799:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15374
EPSS 0% CVSS 5.5
MEDIUM This Month

The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15373
EPSS 0% CVSS 5.5
MEDIUM This Month

The Symphony i95 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15372
EPSS 0% CVSS 5.5
MEDIUM This Month

The Hisense F17 Android device with a build fingerprint of Hisense/F17_4G/HS6739MT:8.1.0/O11019/Hisense_F17_4G_00_S01:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15371
EPSS 0% CVSS 5.5
MEDIUM This Month

The Symphony G100 Android device with a build fingerprint of Symphony/G100/G100:8.1.0/O11019/1530618779:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15370
EPSS 0% CVSS 5.5
MEDIUM This Month

The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1526527761:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15369
EPSS 0% CVSS 5.5
MEDIUM This Month

The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61_Turbo/Z61_Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15368
EPSS 0% CVSS 5.5
MEDIUM This Month

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15367
EPSS 0% CVSS 5.5
MEDIUM This Month

The Haier P10 Android device with a build fingerprint of Haier/P10/P10:8.1.0/O11019/1532662449:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15366
EPSS 0% CVSS 5.5
MEDIUM This Month

The Infinix Note 5 Android device with a build fingerprint of Infinix/H633IJL/Infinix-X604_sprout:8.1.0/O11019/IJL-180531V181:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15365
EPSS 0% CVSS 5.5
MEDIUM This Month

The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15364
EPSS 0% CVSS 5.5
MEDIUM This Month

The Dexp BL250 Android device with a build fingerprint of DEXP/BL250/BL250:8.1.0/O11019/1530858027:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15363
EPSS 0% CVSS 5.5
MEDIUM This Month

The Leagoo Power 5 Android device with a build fingerprint of LEAGOO/Power_5/Power_5:8.1.0/O11019/1532686195:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15362
EPSS 0% CVSS 5.5
MEDIUM This Month

The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88_go/iris88_go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15361
EPSS 0% CVSS 5.5
MEDIUM This Month

The Infinix Note 5 Android device with a build fingerprint of Infinix/H632C/Infinix-X605_sprout:8.1.0/O11019/CE-180914V59:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15360
EPSS 0% CVSS 5.5
MEDIUM This Month

The Hisense U965 Android device with a build fingerprint of Hisense/U965_4G_10/HS6739MT:8.1.0/O11019/Hisense_U965_4G_10_S01:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15359
EPSS 0% CVSS 5.5
MEDIUM This Month

The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15358
EPSS 0% CVSS 5.5
MEDIUM This Month

The Dexp Z250 Android device with a build fingerprint of DEXP/Z250/Z250:8.1.0/O11019/1531130719:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15357
EPSS 0% CVSS 5.5
MEDIUM This Month

The Advan i6A Android device with a build fingerprint of ADVAN/i6A/i6A:8.1.0/O11019/1523602705:userdebug/test-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15356
EPSS 0% CVSS 5.5
MEDIUM This Month

The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15355
EPSS 0% CVSS 5.5
MEDIUM This Month

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15354
EPSS 0% CVSS 5.5
MEDIUM This Month

The Ulefone Armor 5 Android device with a build fingerprint of Ulefone/Ulefone_Armor_5/Ulefone_Armor_5:8.1.0/O11019/1528806701:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +1
NVD
CVE-2019-15353
EPSS 0% CVSS 5.5
MEDIUM This Month

The Coolpad N3C Android device with a build fingerprint of Coolpad/N3C/N3C:8.1.0/O11019/1538236809:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15352
EPSS 0% CVSS 5.5
MEDIUM This Month

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Mediatek +2
NVD
CVE-2019-15351
EPSS 0% CVSS 7.8
HIGH This Week

The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Google Command Injection Tecno H622 Tecno Id5B +1
NVD
CVE-2019-15350
EPSS 0% CVSS 7.8
HIGH This Week

The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Tecno H622 Tecno Id5B +1
NVD
CVE-2019-15349
EPSS 0% CVSS 7.8
HIGH This Week

The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Tecno H612 Tecno Id5A +1
NVD
CVE-2019-15348
EPSS 0% CVSS 7.8
HIGH This Week

The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Google Command Injection Tecno H612 Tecno Id5A +1
NVD
CVE-2019-15347
EPSS 0% CVSS 7.8
HIGH This Week

The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Google Command Injection Camon Iclick 2 Firmware +1
NVD
CVE-2019-15346
EPSS 0% CVSS 7.8
HIGH This Week

The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Camon Iclick 2 Firmware +1
NVD
CVE-2019-15345
EPSS 0% CVSS 7.8
HIGH This Week

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Camon Iclick Firmware +1
NVD
CVE-2019-15344
EPSS 1% CVSS 8.1
HIGH This Week

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Google Camon Iclick Firmware +1
NVD
CVE-2019-15343
EPSS 0% CVSS 7.8
HIGH This Week

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Google Command Injection Camon Iclick Firmware +1
NVD
CVE-2019-15342
EPSS 0% CVSS 7.8
HIGH This Week

The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Google Command Injection Camon Iair 2 Firmware +1
NVD
CVE-2019-15341
EPSS 0% CVSS 7.8
HIGH This Week

The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Camon Iair 2 Firmware +1
NVD
CVE-2019-15340
EPSS 0% CVSS 3.3
LOW Monitor

The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V9.6.4.0.ODMMIFD:user/release-keys contains a pre-installed app with a package. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Redmi 6 Firmware +1
NVD
CVE-2019-15339
EPSS 0% CVSS 3.3
LOW Monitor

The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Z60S Firmware +1
NVD
CVE-2019-15338
EPSS 0% CVSS 3.3
LOW Monitor

The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Iris 88 Firmware +1
NVD
CVE-2019-15337
EPSS 0% CVSS 3.3
LOW Monitor

The Lava Z81 Android device with a build fingerprint of LAVA/Z81/Z81:8.1.0/O11019/1532317309:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Z81 Firmware +1
NVD
CVE-2019-15336
EPSS 0% CVSS 3.3
LOW Monitor

The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61_Turbo/Z61_Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Z61 Firmware +1
NVD
CVE-2019-15335
EPSS 0% CVSS 3.3
LOW Monitor

The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Z92 Firmware +1
NVD
CVE-2019-15334
EPSS 0% CVSS 3.3
LOW Monitor

The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88_go/iris88_go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Iris 88 Firmware +1
NVD
CVE-2019-15333
EPSS 0% CVSS 3.3
LOW Monitor

The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Flair Z1 Firmware +1
NVD
CVE-2019-15332
EPSS 0% CVSS 3.3
LOW Monitor

The Lava Z61 Android device with a build fingerprint of LAVA/Z61_2GB/Z61_2GB:8.1.0/O11019/1533889281:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Google Z61 Firmware +1
NVD
CVE-2019-9467
EPSS 0% CVSS 6.7
MEDIUM This Month

In the Bootloader, there is a possible kernel command injection due to missing command sanitization. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Google Command Injection Android
NVD
CVE-2019-2210
EPSS 0% CVSS 7.8
HIGH This Week

In load_logging_config of qmi_vs_service.cc, there is a possible out of bounds write due to a heap buffer overflow. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2019-2233
EPSS 0% CVSS 6.8
MEDIUM This Month

In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Google Android
NVD
CVE-2019-2214
EPSS 0% CVSS 7.8
HIGH This Week

In binder_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +4
NVD
CVE-2019-2213
EPSS 0% CVSS 7.4
HIGH This Week

In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. Rated high severity (CVSS 7.4), this vulnerability is no authentication required. No vendor patch available.

Privilege Escalation Google Race Condition +1
NVD
CVE-2019-2212
EPSS 0% CVSS 5.5
MEDIUM This Month

In poisson_distribution of random, there is an out of bounds read. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2019-2211
EPSS 1% CVSS 7.5
HIGH This Week

In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure SQLi Google +1
NVD
CVE-2019-2209
EPSS 0% CVSS 5.5
MEDIUM This Month

In BTA_DmPinReply of bta_dm_api.cc, there is a possible out of bounds read due to an incorrect bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2019-2208
EPSS 1% CVSS 7.5
HIGH This Week

In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 JIT code due to a bug in code generation. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2019-2207
EPSS 0% CVSS 7.8
HIGH This Week

In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc, there is a possible out of bound write due to missing bounds checks. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2019-2206
EPSS 1% CVSS 8.8
HIGH This Week

In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Google +2
NVD
CVE-2019-2205
EPSS 3% CVSS 9.8
CRITICAL Act Now

In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +4
NVD
CVE-2019-2204
EPSS 1% CVSS 9.8
CRITICAL Act Now

In FindSharedFunctionInfo of objects.cc, there is a possible out of bounds read due to a mistake in AST traversal. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +2
NVD
CVE-2019-2203
EPSS 0% CVSS 7.8
HIGH This Week

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2019-2202
EPSS 0% CVSS 7.8
HIGH This Week

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2019-2201
EPSS 2% CVSS 7.8
HIGH This Week

In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Google +4
NVD
CVE-2019-2199
EPSS 0% CVSS 6.7
MEDIUM This Month

In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Google Android
NVD
Prev Page 136 of 202 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy