com.mediatek.wfo.impl vulnerability

[MuntashirAkon]

Please check before submitting an issue

• I have investigated the app and created a report

Vulnerability report

CVE-2019-15368

Package name

com.mediatek.wfo.impl

Package label

N/A

Affected versions

Requires investigation (see below). Reported version: 8.1.0 (27)

Removal

Remove

Additional context

According to the report, it “allows any app co-located on the device to modify a system property through an exported interface without proper authorization”, but the component isn't mentioned. All versions with this exported component should be vulnerable.