Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-12-28	CVE-2018-15004	Information Exposure Through Log Files vulnerability in Coolpad Canvas Firmware 7.0 The Coolpad Canvas device with a build fingerprint of Coolpad/cp3636a/cp3636a:7.0/NRD90M/093031423:user/release-keys contains a platform app with a package name of com.qualcomm.qti.modemtestmode (versionCode=24, versionName=7.0) that contains an exported service app component named com.qualcomm.qti.modemtestmode.MbnTestService that allows any app on the device to set certain system properties as the com.android.phone user. network high complexity coolpad CWE-532	5.9