Executive brief
A security flaw in the MTKLogger application on certain LG, RCA, and BLU mobile devices allows malicious apps installed on the device to access sensitive user data. This includes the ability to track the user's GPS location, intercept text messages and call details, and capture network traffic. An attacker could use this information to monitor a user's movements and private communications without their knowledge.
Technical details
The MTKLogger application (com.mediatek.mtklogger) on affected devices fails to properly secure its Android components. Specifically, the LogReceiver and MTKLoggerService components are exported by default because they contain intent filters and do not explicitly set 'android:exported=false' or require custom permissions. A malicious local application can use Intent objects to start and stop logging functions. The resulting logs are stored in /sdcard/mtklog, which is accessible to any app with READ_EXTERNAL_STORAGE permissions. These logs contain sensitive information including GPS coordinates, AT commands (revealing SMS and call metadata), and tcpdump network captures.
Affected products
- LG Android OS (MTK Chipset) 5.0, 5.1, 6.0, 6.0.1, 7.0
- RCA Voyager Tablet
- BLU Advance 5.0
- BLU R1 HD
Timeline
- 2017-01-13: disclosed
- 2017-01-13: advisory