CVE-2012-0326

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-03-17 · updated 2026-06-16
Weakness: CWE-264

Description

The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted application.

Affected products

Tetsuya Aoyama Twicca: 0.7.0, 0.8.8, 0.9.4g-rc2, 0.9.4g2-rc2, 0.9.13-rc2, 0.9.13a-rc2 (+14)

References

http://jvn.jp/en/jp/JVN31860555/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000024
http://osvdb.org/80106
http://twicca.r246.jp/notice/
http://www.securityfocus.com/bid/52442
https://exchange.xforce.ibmcloud.com/vulnerabilities/73951
https://play.google.com/store/apps/details?id=jp.r246.twicca
http://jvn.jp/en/jp/JVN31860555/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000024
http://osvdb.org/80106
http://twicca.r246.jp/notice/
http://www.securityfocus.com/bid/52442

Get alerted when CVE-2012-0326 or the next vulnerability affects your stack