Leagoo manufactures a line of mobile devices whose vulnerability profile concentrates in its smartphone and firmware products such as the P1, Z5C, and Alfa 6, positioning them within a niche but prominent segment of consumer mobile hardware. The vendor's vulnerabilities skew toward serious outcomes, with an elevated share reaching critical severity; the recurring weakness classes span sensitive-information exposure, authorization gaps, and command-injection flaws characteristic of firmware and mobile OS implementations. Current severity and exploitation metrics are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Leagoo over time
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-14999CRITICAL The Leagoo P1 device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed platform app with a package na | Apr 25, 2019 | 9.1 | 28 | NO | NO |
CVE-2018-14986HIGH The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed app with a package na | Dec 28, 2018 | 7.5 | 23 | NO | NO |
CVE-2018-14984HIGH The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed app with a package na | Dec 28, 2018 | 7.5 | 23 | NO | NO |
CVE-2016-6564HIGH Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks. Additionally, there are multiple techniques used to hide the exe | Jul 13, 2018 | 8.1 | 23 | NO | NO |
CVE-2018-14998MEDIUM The Leagoo P1 Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a hidden root privilege escalation cap | Dec 28, 2018 | 6.8 | 22 | NO | NO |
CVE-2018-14985HIGH The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed platform app with a p | Dec 28, 2018 | 7.1 | 22 | NO | NO |
CVE-2018-14997MEDIUM The Leagoo P1 Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains the android framework (i.e., system_se | Apr 25, 2019 | 5.5 | 20 | NO | NO |
CVE-2019-15363MEDIUM The Leagoo Power 5 Android device with a build fingerprint of LEAGOO/Power_5/Power_5:8.1.0/O11019/1532686195:user/release-keys contains a pre-installed app with a package name of c | Nov 14, 2019 | 5.5 | 18 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Leagoo.
Media articles that mention a CVE ID that affects a product developed by Leagoo — matched by CVE ID, not by vendor name.