Every CVE Search/ Get API key

CVE-2012-0326

The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of...

5.0 Medium

The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted application.

Exploit likelihood

1.49%Up 0.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted application.

Record
CVE-2012-0326
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted application.

Record
CVE-2012-0326
Updated
2026-11-02
EUVDEUVD-2012-0362 No score

The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted application.

Record
EUVD-2012-0362
Updated
2026-11-03
GitHub AdvisoriesGHSA-x38j-p93g-v49r No score

The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of...

The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted application.

Record
GHSA-x38j-p93g-v49r
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0326 is a medium vulnerability (CVSS 5.0) in Tetsuya Aoyama Twicca, published March 17, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.49%, the 74th percentile. No source names a fixed version.

References

MoveEnter Open