Exposed Factory Reset Service in Ulefone and Krüger&Matz Android Devices

CVE-2024-13915

What is CVE-2024-13915?

Ulefone and Krüger&Matz Android smartphones feature a preloaded application named 'com.pri.factorytest' that exposes a critical service allowing any application on the device to execute a factory reset. This vulnerability arises from improper access controls within the 'com.pri.factorytest.emmc.FactoryResetService'. The affected application version 1.0 does not increment despite the issue being present in OS builds after late 2024 for Ulefone and potentially in March 2025 for Krüger&Matz. This loophole can have severe implications for users, as it allows malicious applications to regain control over the device by resetting it without the user's consent.

References