CVE-2019-15388

CVE-2019-15388 is a high-severity vulnerability affecting the Coolpad 1851 Android device, specifically its pre-installed com.lovelyfont.defcontainer app. This app contains an exported service that allows arbitrary commands to be executed as the system user, either locally by a zero-permission app or remotely via a Man-in-the-Middle (MITM) attack on an accompanying app's unencrypted network requests. The vulnerability has a CVSS score of 8.1 (HIGH) due to its network attack vector, high impact on confidentiality, integrity, and availability, and the ability for attackers to gain extensive control over the device, including screen recording, factory resets, and access to sensitive user data. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in the CISA KEV catalog.