CVE-2018-15002

The Vivo V7 device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys allows any app co-located on the device to set system properties as the com.android.phone user. The com.qualcomm.qti.modemtestmode app (versionCode=25, versionName=7.1.2) that contains an exported service named com.qualcomm.qti.modemtestmode.MbnTestService that allows any app co-located on the device to provide key-value pairs to set certain system properties. Notably, system properties with the persist.* prefix can be set which will survive a reboot. On the Vivo V7 device, when the persist.sys.input.log property is set to have a value of yes, the user's screen touches be written to the logcat log by the InputDispatcher for all apps. The system-wide logcat log can be obtained from external storage via a different known vulnerability on the device. The READ_EXTERNAL_STORAGE permission is necessary to access the log files containing the user's touch coordinates. With some effort, the user's touch coordinates can be mapped to key presses on a keyboard.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:vivo:v7_firmware:7.1.2:*:*:*:*:*:*:*
cpe:2.3:h:vivo:v7:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:50

Type Values Removed Values Added
References () https://www.kryptowire.com/portal/android-firmware-defcon-2018/ - Third Party Advisory () https://www.kryptowire.com/portal/android-firmware-defcon-2018/ - Third Party Advisory
References () https://www.kryptowire.com/portal/wp-content/uploads/2018/12/DEFCON-26-Johnson-and-Stavrou-Vulnerable-Out-of-the-Box-An-Eval-of-Android-Carrier-Devices-WP-Updated.pdf - Third Party Advisory () https://www.kryptowire.com/portal/wp-content/uploads/2018/12/DEFCON-26-Johnson-and-Stavrou-Vulnerable-Out-of-the-Box-An-Eval-of-Android-Carrier-Devices-WP-Updated.pdf - Third Party Advisory

Information

Published : 2018-12-28 21:29

Updated : 2024-11-21 03:50


NVD link : CVE-2018-15002

Mitre link : CVE-2018-15002

CVE.ORG link : CVE-2018-15002


JSON object : View

Products Affected

vivo

  • v7_firmware
  • v7
CWE
CWE-532

Insertion of Sensitive Information into Log File