CVE-2026-81330 — Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information

CVE-2026-81330

Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information PUBLISHED

Description (CNA)

The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless range may capture and reconstruct the live video stream without transport encryption.

Affected (CNA)

Vendor / product	Versions
Softish / EarVision Android application	affected 1.3.1
Softish / C6 Ear Camera	affected 1.3.1_Code 132

CWE

CWE-319

References

https://raw.githubusercontent.com/cisagov/CSAF/refs/heads/develop/csaf_files/VA/white/2026/va-26-251-01.json

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.