CVE-2018-15002 Information disclosure in n/a
A malicious app can set system properties to log user touch coordinates, enabling keylogger-style data theft on Vivo devices.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-15002?
CVE-2018-15002 is a medium-severity vulnerability in n/a, published on 28 Dec 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The Vivo V7 device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys allows any app co-located on the device to set system properties as the com.android.phone user. The com.qualcomm.qti.modemtestmode app (versionCode=25, versionName=7.1.2) that contains an exported service named com.qualcomm.qti.modemtestmode.MbnTestService that allows any app co-located on the device to provide key-value pairs to set certain system properties. Notably, system properties with the persist.* prefix can be set which will survive a reboot. On the Vivo V7 device, when the persist.sys.input.log property is set to have a value of yes, the user's screen touches be written to the logcat log by the InputDispatcher for all apps. The system-wide logcat log can be obtained from external storage via a different known vulnerability on the device. The READ_EXTERNAL_STORAGE permission is necessary to access the log files containing the user's touch coordinates. With some effort, the user's touch coordinates can be mapped to key presses on a keyboard.
Weakness: CWE-532
Which versions are affected by CVE-2018-15002?
It affects 1 product.
Products include Vivo V7 Firmware.
How do I fix CVE-2018-15002?
No fix has been published for CVE-2018-15002 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-15002 being exploited?
There is no known exploitation of CVE-2018-15002 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-xq88-7x7g-c8p2.