Design/Logic Flaw

The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remot...

CVE-2012-2980

CVE-2012-2980 affects Android devices from Samsung and HTC where onTouchEvent implementations stored touch coordinates in the dmesg buffer. This design flaw could allow a non-privileged app with the ability to run dmesg to derive sensitive user data such as PINs, text messages, and telephone numb...