Vulnerability in Tecno Camon Android Device with Pre-Installed Malicious App

CVE-2019-15350

Summary

A vulnerability exists in the Tecno Camon Android device, where a pre-installed app features an exported service that allows any other app on the device to execute code with system privileges. This can lead to significant security risks, such as unauthorized screen recording, factory resets, and access to sensitive user data, including notifications, logs, and messages. The vulnerability cannot be mitigated by user intervention, as the app remains active and cannot be disabled.

References