CVE-2024-12993 — Location information exposure in Infinix Weather app
Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the use…
Published: 2024-12-30 · CVSS: 4.8 · CVSS 4.0
Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges. After multiple attempts to contact the vendor we did not receive any answer. We suppose this issue affects all Infinix Mobile devices.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7