Android Device Vulnerability in Tecno Camon iClick by Tecno

CVE-2019-15345

What is CVE-2019-15345?

The Tecno Camon iClick features a critical vulnerability due to an exported service within a pre-installed app that allows any co-located application to dynamically load and execute a Dalvik Executable (DEX) file with system-level permissions. This weakness can be exploited by unprivileged applications, enabling them to perform a wide array of malicious activities such as video recording the screen, factory resetting the device, accessing sensitive notifications, reading log files, and intercepting personal messages. The downside of this vulnerability is that the pre-installed app cannot be disabled by users, significantly increasing the risk of unauthorized monitoring and control over the device.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References