CVE-2019-10251

The CVE-2019-10251 entry concerns the UCWeb UC Browser on Android (pre-2020) that downloads modules tied to PDF/Office processing via libpicsel over HTTP. This insecure HTTP traffic enables man‑in‑the‑middle attacks against module downloads, exposing users to potential data interception or tamper...

PT-2019-11660

Name of the Vulnerable Software and Affected Versions: UCWeb UC Browser for Android through 2019-03-26 Description: The issue allows for man-in-the-middle MITM attacks due to the use of HTTP for downloading certain modules related to libpicsel, which are associated with PDF and Microsoft Office...

CVE-2019-10251: Cleartext Transmission of Sensitive Information

The UCWeb UC Browser application through 2019-03-26 for Android uses HTTP to download certain modules associated with PDF and Microsoft Office files related to libpicsel, which allows MITM attacks...