BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartphones uses weak permissions for a BlackBerry Protect object, which allows physically proximate attackers to bypass intended access restrictions by leveraging a users BlackBerry Protect password-reset request and a users installation of a crafted application.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Blackberry_os | Blackberry | * | 10.0.10.261 (including) |
| Blackberry_os | Blackberry | 10.0 (including) | 10.0 (including) |
| Blackberry_os | Blackberry | 10.0.10 (including) | 10.0.10 (including) |
| Blackberry_os | Blackberry | 10.0.10.85 (including) | 10.0.10.85 (including) |