CVE-2012-5187

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-02-06 · updated 2026-06-16
Weakness: CWE-264

Description

The Weathernews Touch application 2.3.2 and earlier for Android allows attackers to obtain sensitive information about logged locations via a crafted application that leverages read permission for system log files.

Affected products

Weathernews Touch: through 2.3.2; 1.20, 1.23, 1.33, 1.35, 1.38, 1.39 (+19)

References

http://jvn.jp/en/jp/JVN86040029/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000005
http://jvn.jp/en/jp/JVN86040029/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000005

Get alerted when CVE-2012-5187 or the next vulnerability affects your stack