Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Tencent Subscribe
Filtered by product Qq
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-33057 1 Tencent 1 Qq 2022-08-04 N/A 7.5 HIGH
The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements (e.g., android.permission.ACCESS_FINE_LOCATION) for determining the device's physical location. An attacker can use qq.createMapContext to create a MapContext object, use MapContext.moveToLocation to move the center of the map to the device's location, and use MapContext.getCenterLocation to get the latitude and longitude of the current map center.