CVE-2019-15027

The MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arbitrary commands as root via shell metacharacters in a filename under /data, because clear_emmc_nomedia_entry in platform/mt6577/external/meta/emmc/meta_clr_emmc.c invokes 'system("/system/bin/rm -r /data/' followed by this filename upon an eMMC clearance from a Meta Mode boot. NOTE: compromise of Fire OS on the Amazon Echo Dot would require a second hypothetical vulnerability that allows creation of the required file under /data.

• CWE-78

• https://dojo.bullguard.com/dojo-by-bullguard/blog/gaining-rooting-primitives-for-android-mediatek-chips/Exploit, Third Party Advisory
• https://github.com/andr3jx/MTK6577/blob/238012ebf18e3751397884d1742ff7ab6417e80d/mediatek/platform/mt6577/external/meta/emmc/meta_clr_emmc.c#L302-L305Third Party Advisory
• https://dojo.bullguard.com/dojo-by-bullguard/blog/gaining-rooting-primitives-for-android-mediatek-chips/Exploit, Third Party Advisory
• https://github.com/andr3jx/MTK6577/blob/238012ebf18e3751397884d1742ff7ab6417e80d/mediatek/platform/mt6577/external/meta/emmc/meta_clr_emmc.c#L302-L305Third Party Advisory

Published

Aug 14, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15021A security vulnerability exists in the Zingbox Inspector ver…5.3
• CVE-2019-15022A security vulnerability exists in Zingbox Inspector version…7.5
• CVE-2019-15023A security vulnerability exists in Zingbox Inspector version…7.5
• CVE-2019-15024In all versions of ClickHouse before 19.14.3, an attacker ha…6.5
• CVE-2019-15025The ninja-forms plugin before 3.3.21.2 for WordPress has SQL…
• CVE-2019-15026memcached 1.5.16, when UNIX sockets are used, has a stack-ba…
• CVE-2019-15028In Joomla! before 3.9.11, inadequate checks in com_contact c…
• CVE-2019-15029FusionPBX 4.4.8 allows an attacker to execute arbitrary syst…
• CVE-2019-1503Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15030In the Linux kernel through 5.2.14 on the powerpc platform, …4.4
• CVE-2019-15031In the Linux kernel through 5.2.14 on the powerpc platform, …4.4
• CVE-2019-15032Pydio 6.0.8 mishandles error reporting when a directory allo…5.3