https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-15388.htmlhttps://patchthecve.com/cve/CVE-2019-15388.htmlWed, 17 Jun 2026 02:20:14 +0000HIGH 8.1: The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.1.13). This app contains an exported service namedhttps://patchthecve.com/cve/CVE-2019-15368.htmlhttps://patchthecve.com/cve/CVE-2019-15368.htmlWed, 17 Jun 2026 02:20:11 +0000MEDIUM 5.5: The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify https://patchthecve.com/cve/CVE-2019-15353.htmlhttps://patchthecve.com/cve/CVE-2019-15353.htmlWed, 17 Jun 2026 02:20:09 +0000MEDIUM 5.5: The Coolpad N3C Android device with a build fingerprint of Coolpad/N3C/N3C:8.1.0/O11019/1538236809:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system propehttps://patchthecve.com/cve/CVE-2019-15352.htmlhttps://patchthecve.com/cve/CVE-2019-15352.htmlWed, 17 Jun 2026 02:20:09 +0000MEDIUM 5.5: The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify https://patchthecve.com/cve/CVE-2018-15003.htmlhttps://patchthecve.com/cve/CVE-2018-15003.htmlWed, 17 Jun 2026 01:42:03 +0000HIGH 7.5: The Coolpad Defiant (Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys) and the T-Mobile Revvl Plus (Coolpad/alchemy/alchemy:7.1.1/143.14.171129.3701A-TMO/buildf_nj_02-206:user/release-keys) Android devices contain a pre-installed platform app with a package name of com.qualcomm.qti.thttps://patchthecve.com/cve/CVE-2018-14991.htmlhttps://patchthecve.com/cve/CVE-2018-14991.htmlWed, 17 Jun 2026 01:42:02 +0000CRITICAL 9.8: The Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys, the ZTE ZMAX Pro with a build fingerprint of ZTE/P895T20/urd:6.0.1/MMB29M/20170418.114928:user/release-keys, and the T-Mobile Revvl Plus with a build fingerprint of Coolpad/alchemhttps://patchthecve.com/cve/CVE-2018-14990.htmlhttps://patchthecve.com/cve/CVE-2018-14990.htmlWed, 17 Jun 2026 01:42:02 +0000HIGH 7.5: The Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys, the ZTE ZMAX Pro with a build fingerprint of ZTE/P895T20/urd:6.0.1/MMB29M/20170418.114928:user/release-keys, and the T-Mobile Revvl Plus with a build fingerprint of Coolpad/alchemhttps://patchthecve.com/cve/CVE-2018-15004.htmlhttps://patchthecve.com/cve/CVE-2018-15004.htmlWed, 17 Jun 2026 01:42:04 +0000MEDIUM 5.9: The Coolpad Canvas device with a build fingerprint of Coolpad/cp3636a/cp3636a:7.0/NRD90M/093031423:user/release-keys contains a platform app with a package name of com.qualcomm.qti.modemtestmode (versionCode=24, versionName=7.0) that contains an exported service app component named com.qualcomm.qti.