Some parameters of the alarm clock module are improperly stored, leaking some sensitive information.
The vulnerability can be fixed by updating the vivo alarm clock.
Xiaofeng Liu (Shandong University) / Qinsheng Hou (Shandong University & Qi An Xin Group Corp.)
vivo is committed to providing users with best cyber security products and services, and follows the industrial best practice to handle and publish vunerability information.
To report a security vulnerability in vivo products and solutions, please send it to
security@vivo.com.
For details, please visit
Security Advisory.