CVE-2021-40180

Description

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts.

Weakness classification

• CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

• cve@mitre.org — Mitigation, Technical Description, Third Party Advisory
• cve@mitre.org — Exploit, Third Party Advisory
• cve@mitre.org — Exploit, Permissions Required, Third Party Advisory
• cve@mitre.org — Exploit, Permissions Required, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Technical Description, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Permissions Required, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Permissions Required, Third Party Advisory