BLU R1 HD devices with Shanghai Adups software vulnerabilities
3 known CVE vulnerabilities in BLU R1 HD devices with Shanghai Adups software, translated and rated.
- CVE-2016-10139High
An issue was discovered on BLU R1 HD devices with Shanghai Adups software related to the com.adups.fota and com.adups.fota.sysoper apps. The com.adups.fota.sysoper app runs as the system user, granting it numerous permissions, including access to the user's call log, text messages, and device identifiers.
- CVE-2016-10137High
An issue was discovered on BLU R1 HD devices with Shanghai Adups software that allows apps to access files as the system user. The com.adups.fota.sysoper app enables other apps to read, write, and delete files, including users' text messages and call logs.
- CVE-2016-10136High
An issue was discovered on BLU R1 HD devices with Shanghai Adups software that allows apps to access files as the system user. The com.adups.fota.sysoper app sets the android:sharedUserId attribute to android.uid.system, enabling other apps to read, write, and delete system files.