medium5.3
CVE-2021-27549
Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android application by default.
Impact
Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android application by default. NOTE: the vendor's position is that this is intended behavior that can be changed through the Settings > Device screen
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Genymobile | Genymotion Desktop | through 3.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.genymotion.com/desktop/latest/02_Application.html
- https://github.com/eybisi/misc/tree/main/clipwatch
- https://twitter.com/0xabc0/status/1363788023956185090
- https://twitter.com/0xabc0/status/1363855602477387783
- https://twitter.com/0xabc0/status/1363856804602671104
- https://www.genymotion.com/download/
- https://www.youtube.com/watch?v=Tod8Q6sf0P8
- https://docs.genymotion.com/desktop/latest/02_Application.html
- https://github.com/eybisi/misc/tree/main/clipwatch
- https://twitter.com/0xabc0/status/1363788023956185090
- https://twitter.com/0xabc0/status/1363855602477387783
- https://twitter.com/0xabc0/status/1363856804602671104
- https://www.genymotion.com/download/
- https://www.youtube.com/watch?v=Tod8Q6sf0P8