The issue allows remote attackers to obtain sensitive information about a device's physical environment via a crafted web site, by exploiting a lack of protection for certain data in the WebKit component. This could potentially reveal confidential information about the device.