CVE-2021-41848

CVE-2021-41848 is a critical vulnerability affecting Luna Simo devices, as well as products from Blu Products and Wiko Mobile, where a local third-party app can execute arbitrary code as root. The vulnerability stems from improper software update handling, allowing a malicious app with write access to external storage to provide a spoofed update. This update, despite being encrypted with a hard-coded key, can contain an arbitrary shell script and ARM binary, both executed with root privileges and the osi SELinux domain. The high CVSS score of 7.8 reflects the complete compromise of confidentiality, integrity, and availability, with the potential for persistent code execution even after the malicious app is uninstallation. There is currently no evidence of active exploitation, public exploit code, or significant community discussion regarding this vulnerability.