Description (CNA)
HelloTalk through 3.4.1 stores full-precision GPS coordinates even when the user had intended to share only a country or city. Furthermore, these coordinates are placed into a database on the client of other users. (The client side was changed in 2019 to encrypt that database.)
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HelloTalk / HelloTalk | affected 0 through 3.4.1 |
CWE
CWE-359
References
ADP enrichment
No English description supplied.
No references supplied.