PT-2019-9089 · Qualcomm+2 · Com.Qualcomm.Qti.Telephony.Extcarrierpack+2

Published 2019-04-25 · Updated 2019-05-02 · CVE-2018-15003

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Coolpad Defiant version 7.1.1 T-Mobile Revvl Plus version 7.1.1

Description The issue concerns a pre-installed platform app with a package name of com.qualcomm.qti.telephony.extcarrierpack that contains an exported broadcast receiver app component named com.qualcomm.qti.telephony.extcarrierpack.UiccReceiver. This component allows any app co-located on the device to programmatically perform a factory reset without requiring any permissions. A factory reset will remove all user data and apps from the device, resulting in the loss of any data that have not been backed up or synced externally.

Recommendations For Coolpad Defiant version 7.1.1, consider disabling the com.qualcomm.qti.telephony.extcarrierpack.UiccReceiver component to prevent unauthorized factory resets. For T-Mobile Revvl Plus version 7.1.1, restrict access to the com.qualcomm.qti.telephony.extcarrierpack app to minimize the risk of exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-15003

Affected Products

Coolpad Defiant

T-Mobile Revvl Plus

Com.Qualcomm.Qti.Telephony.Extcarrierpack

References · 4

• 🔥 https://kryptowire.com/portal/android-firmware-defcon-2018 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-15003 · Security Note
• https://kryptowire.com · Note
• https://kryptowire.com/portal/wp-content/uploads/2018/12/DEFCON-26-Johnson-and-Stavrou-Vulnerable-Out-of-the-Box-An-Eval-of-Android-Carrier-Devices-WP-Updated.pdf · Note