In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615 MDM9625 SD 210/SD 212/SD 205 SD 400 and SD 800 improper access control on ATCMD service allows third party services to access without user knowledge.