Share to Clipboard: Improperly exported Android activity allows clipboard overwrite
Share to Clipboard for Android, version 1.14.1 (versionCode 32), exports an activity that is not protected by a permission. Any app installed on the same device can start it and silently replace the content of the system clipboard with its own text, without confirmation. The attacker cannot read the clipboard, and no code execution or privilege escalation is claimed. The risk is that a value a user pastes later, such as a password or customer data, has been replaced.
Tengu · Share to Clipboard
