https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T13:28:47.170291+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2019-15356 fkie_cve-2019-15356 2026-09-29T13:28:47.174507+00:00

The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.

 https://vulnerability.circl.lu/vuln/ghsa-6qp9-325w-8r9j GHSA-6qp9-325w-8r9j 2026-09-29T13:28:47.174603+00:00

The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.

 https://vulnerability.circl.lu/vuln/gsd-2019-15356 gsd-2019-15356 2026-09-29T13:28:47.174642+00:00 gsd-2019-15356 https://vulnerability.circl.lu/vuln/var-201911-0521 VAR-201911-0521 2026-09-29T13:28:47.174665+00:00

The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Lava Flair Z1 Android The device is vulnerable to a lack of authentication.Information may be tampered with. An attacker could use this vulnerability to modify system properties