CVE-2018-19111 The Google Cardboard application 1.8 for Android and 1.2 for iOS sends potentially private cleartext information to the Unity 3D Stats web site, as demonstrated by device make, model, and OS.
MediumCVSS 5.3
EPSS 0.22%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Google Cardboard application 1.8 for Android and 1.2 for iOS sends potentially private cleartext information to the Unity 3D Stats web site, as demonstrated by device make, model, and OS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google cardboard | = 1.2 | No fix listed |
| Google cardboard | = 1.8 | No fix listed |
References
- www.info-sec.ca third-party-advisory