An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit)

An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files without authorization

A hard-coded AES key vulnerability was reported in the Motorola GuideMe application, along with a lack of URI sanitation, could allow for a local attacker to read arbitrary files

A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unauthorized content providers

An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire the location of the device without…

A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-exported software…

An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI

A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user information

An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices

An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read system logs

An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a local database

An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application to read files without authorization

An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local application to execute OS commands

An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider

An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauthorized Activities

An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-related data

An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider (com.motorola.server.enterprise.MotoDpmsProvider) that could allow a local attacker to…

A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to access local files

An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data

An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorized information