CVE-2024-38480

Impact

"Piccoma" App for Android and iOS versions prior to 6.20.0 uses a hard-coded API key for an external service, which may allow a local attacker to obtain the API key. Note that the users of the app are not directly affected by this vulnerability.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://apps.apple.com/jp/app/%E3%83%94%E3%83%83%E3%82%B3%E3%83%9E/id1091496983
• https://jvn.jp/en/jp/JVN01073312/
• https://play.google.com/store/apps/details?id=jp.kakao.piccoma
• https://apps.apple.com/jp/app/%E3%83%94%E3%83%83%E3%82%B3%E3%83%9E/id1091496983
• https://jvn.jp/en/jp/JVN01073312/
• https://play.google.com/store/apps/details?id=jp.kakao.piccoma