CVE-2018-19111

Name of the Vulnerable Software and Affected Versions Google Cardboard application version 1.8 for Android Google Cardboard application version 1.2 for iOS

Description The issue concerns the transmission of potentially private cleartext information to the Unity 3D Stats web site. This includes details such as device make, model, and OS.

Recommendations For Google Cardboard application version 1.8 on Android, consider restricting access to sensitive device information until a patch is available. For Google Cardboard application version 1.2 on iOS, consider restricting access to sensitive device information until a patch is available.