Unauthorized Access in Hisense U965 Android Device from MediaTek App
CVE-2019-15360

5.5MEDIUM

Key Information:

Vendor

Hisense

Status
Infinity U965 Firmware
Vendor
CVE Published:
14 November 2019

What is CVE-2019-15360?

The Hisense U965 Android device has a significant flaw due to a pre-installed MediaTek application which exposes an exported interface that allows any co-located app to modify system properties. This vulnerability arises from inadequate authorization checks, potentially enabling malicious applications to change critical system settings, leading to security risks and potential system instability.

References

https://www.kryptowire.com/android-firmware-2019/
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.