YubiClip XOR: Improper export of Android component allows clipboard overwrite
YubiClip XOR version 1.0.1 (versionCode 10003) for Android contains an exported activity without permission checks. Any app installed on the same device can start this activity and overwrite the system clipboard with an attacker-chosen string. The clipboard feature is enabled by default, and no user confirmation is required.
craftxbox · YubiClip XOR
