CVE-2019-15344

CVE-2019-15344 describes a critical vulnerability in the Tecno Camon iClick Android device, specifically within a pre-installed platform app named com.lovelyfont.defcontainer. This app contains an exported service that allows arbitrary command execution as the system user, affecting the device and its firmware. The vulnerability has a CVSS score of 8.1 (High) due to its network attack vector and high impact on confidentiality, integrity, and availability. An attacker can exploit this via a zero-permission app on the device or through a Man-in-the-Middle (MITM) attack on an accompanying app's unencrypted network requests. Successful exploitation grants extensive control, including screen recording, factory resets, notification access, and text message interception. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage. Its EPSS score is low, suggesting a low probability of exploitation in the wild.