Unscored severity · published Aug 21, 2012
CVE-2012-2980
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z,…
–
CVSS
1.8%
EPSS
No
On KEV
Description
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remote attackers to obtain sensitive information via a crafted application, as demonstrated by PIN numbers, telephone numbers, and text messages.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chacha · Htc
All versions, or not specified · source: NVD
DE
Desire · Htc
All versions, or not specified · source: NVD
ES
Evo Shift 4g · Sprint
All versions, or not specified · source: NVD
G2
G2 · T-mobile
All versions, or not specified · source: NVD
GS
Galaxy S · Samsung
All versions, or not specified · source: NVD
ME
Merge · Htc
All versions, or not specified · source: NVD
M3
Mytouch 3g Slide · T-mobile
All versions, or not specified · source: NVD
M4
Mytouch 4g Slide · T-mobile
All versions, or not specified · source: NVD
ST
Status · Att
All versions, or not specified · source: NVD