30Z_firmware vulnerabilities
3 known vulnerabilities in 30Z_firmware from Tcl. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
30Z_firmware: Incorrect Privilege Assignment
Various software builds for the following TCL devices (30Z, A3X, 20XE, 10L) leak the device IMEI to a system property that can be accessed by any local app on the device without any permissions or special privileges. Google restricted third-party apps from dir
- 8.0 High severity
30Z_firmware: Exposure of Sensitive Information to an Unauthorized Actor
Various software builds for the following TCL 30Z and TCL A3X devices leak the ICCID to a system property that can be accessed by any local app on the device without any permissions or special privileges. Google restricted third-party apps from directly obtain
- 7.8 High severity
30Z_firmware: Incorrect Default Permissions
Certain software builds for the TCL 30Z and TCL 10 Android devices contain a vulnerable, pre-installed app that relies on a missing permission that provides no protection at runtime. The missing permission is required as an access permission by components in v