CVE-2020-25900
HelloTalk through 3.4.1 stores full-precision GPS coordinates even when the user had intended to share only a country or city. Furthermore, these coordinates are placed into a d…
Published: 2026-06-05 · CVSS: 5.3 · CVSS 3.1
HelloTalk through 3.4.1 stores full-precision GPS coordinates even when the user had intended to share only a country or city. Furthermore, these coordinates are placed into a database on the client of other users. (The client side was changed in 2019 to encrypt that database.)
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7