What is CVE-2018-19111?

CVE-2018-19111 is a medium-severity vulnerability in Google Cardboard, classified under Cleartext Transmission of Sensitive Information. CVSS score: 5.3/10. Published 2018-11-08.

How severe is CVE-2018-19111?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Google Cardboard

CVE-2018-19111

The Google Cardboard application 1.8 for Android and 1.2 for iOS sends potentially private cleartext information to the Unity 3D Stats web site, as demonstrated by device make, model, and OS.

EPSS: 0.002 (12.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Google Cardboard — versions 1.2, 1.8
N/a — versions n/a

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-19111?: CVE-2018-19111 is a medium-severity vulnerability in Google Cardboard, classified under Cleartext Transmission of Sensitive Information. CVSS score: 5.3/10. Published 2018-11-08.
How severe is CVE-2018-19111?: Medium severity. CVSS v3 base score is 5.3 out of 10.