medium4.7
CVE-2023-25647
There is a permission and access control vulnerability in some ZTE mobile phones.
Impact
There is a permission and access control vulnerability in some ZTE mobile phones. Due to improper access control, applications in mobile phone could monitor the touch event.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Axon 30 Firmware | before 3.0.0b06 |
| Zte | Axon 40 Pro Firmware | before 1.0.0b16 |
| Zte | Axon 40 Ultra Firmware | before 2.0.0b17 |
| Zte | Nubia Z50 Firmware | before 1.0.0b19mr |