Skip to content
OpenAdvisories
Medium · 4.7 CVE-2023-25647 EUVD-2023-29586GHSA-v259-cwpg-phf4

Permission and Access Control Vulnerability in Some ZTE Mobile Phones

Published Aug 17, 2023 · Updated Oct 1, 2024 · Assigned by zte

Vendor: ZTE Product: Some ZTE Mobile Phones

Description

There is a permission and access control vulnerability in some ZTE mobile phones. Due to improper access control, applications in mobile phone could monitor the touch event.

Affected products

VendorProductAffectedFixed
ZTE Some ZTE Mobile Phones NON_EEA_P870F21V1.0.0B01 – ≤ V1.0.0B07, GEN_ZTE_PQ82A01V1.0.0B01MR – ≤ V1.0.0B18MR, GEN_ZTE_P870A01V3.0.0B01 – ≤ V3.0.0B05, GEN_ZTE_P898A01V2.0.0B01 – ≤ V2.0.0B16 —

References