Is CVE-2016-10135 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2016-10135 being exploited in the wild.

How severe is CVE-2016-10135?

Medium severity, with a CVSS score of 5.5, published 13 January 2017.

Which products and versions are affected?

LG Android OS (MTK Chipset) 5.0, 5.1, 6.0, 6.0.1, 7.0; RCA Voyager Tablet; BLU Advance 5.0; BLU R1 HD.

Is there a fix for CVE-2016-10135?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2016-10135 attacked?

It is attacked with local access, in an operating system.

Am I affected by CVE-2016-10135?

Check whether you run BLU Advance 5.0, BLU R1 HD or RCA Voyager Tablet. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2016-10135: LG and MediaTek devices information disclosure in MTKLogger

CVE-2016-10135 · Severity: medium · CVSS 5.5 · Published 2017-01-13

A security flaw in the MTKLogger application on certain LG, RCA, and BLU mobile devices allows malicious apps installed on the device to access sensitive user data. This includes the ability to track the user's GPS location, intercept text messages and call details, and capture network traffic. An attacker could use this information to monitor a user's movements and private communications without their knowledge.

Technologies: BLU R1 HD. Vendors: BLU.

Quick answers

Is CVE-2016-10135 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2016-10135 being exploited in the wild.
How severe is CVE-2016-10135?: Medium severity, with a CVSS score of 5.5, published 13 January 2017.
Which products and versions are affected?: LG Android OS (MTK Chipset) 5.0, 5.1, 6.0, 6.0.1, 7.0; RCA Voyager Tablet; BLU Advance 5.0; BLU R1 HD.
Is there a fix for CVE-2016-10135?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2016-10135 attacked?: It is attacked with local access, in an operating system.
Am I affected by CVE-2016-10135?: Check whether you run BLU Advance 5.0, BLU R1 HD or RCA Voyager Tablet. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The MTKLogger application (com.mediatek.mtklogger) on affected devices fails to properly secure its Android components. Specifically, the LogReceiver and MTKLoggerService components are exported by default because they contain intent filters and do not explicitly set 'android:exported=false' or require custom permissions. A malicious local application can use Intent objects to start and stop logging functions. The resulting logs are stored in /sdcard/mtklog, which is accessible to any app with READ_EXTERNAL_STORAGE permissions. These logs contain sensitive information including GPS coordinates, AT commands (revealing SMS and call metadata), and tcpdump network captures.

Affected products

LG Android OS (MTK Chipset) 5.0, 5.1, 6.0, 6.0.1, 7.0
RCA Voyager Tablet
BLU Advance 5.0
BLU R1 HD

Timeline

2017-01-13: disclosed
2017-01-13: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.