CVE-2023-25645 (up_t2_4k_firmware, zxv10_b860h_v5d0_firmware, zxv10_b866v2-h_firmware, zxv10_b866v2_firmware, zxv10_b866v2f_firmware)

There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and applications on the user's device, affecting device operation.

access access control application applications clear control cve data device exploitation functions non permission permissions personal personal data privilege privileged settings signature vulnerability zte