https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2016-10139.htmlhttps://patchthecve.com/cve/CVE-2016-10139.htmlWed, 17 Jun 2026 00:39:08 +0000HIGH 7.8: An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The two package names involved in the exfiltration are com.adups.fota and com.adups.fota.sysoper. In the com.adups.fota.sysoper app's AndroidManifest.xml file, it sets the android:sharedUserId attribute to a value of android.https://patchthecve.com/cve/CVE-2016-10138.htmlhttps://patchthecve.com/cve/CVE-2016-10138.htmlWed, 17 Jun 2026 00:39:07 +0000HIGH 7.8: An issue was discovered on BLU Advance 5.0 and BLU R1 HD devices with Shanghai Adups software. The com.adups.fota.sysoper app is installed as a system app and cannot be disabled by the user. In the com.adups.fota.sysoper app's AndroidManifest.xml file, it sets the android:sharedUserId attribute to ahttps://patchthecve.com/cve/CVE-2016-10137.htmlhttps://patchthecve.com/cve/CVE-2016-10137.htmlWed, 17 Jun 2026 00:39:07 +0000HIGH 7.8: An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sysoper.provider.InfoProvider in the app with a package name of com.adups.fota.sysoper allows any app on the device to read, write, and delete files as the system user. In the com.aduhttps://patchthecve.com/cve/CVE-2016-10136.htmlhttps://patchthecve.com/cve/CVE-2016-10136.htmlWed, 17 Jun 2026 00:39:07 +0000HIGH 7.8: An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sysoper.provider.InfoProvider in the app with a package name of com.adups.fota.sysoper allows any app on the device to read, write, and delete files as the system user. In the com.adu