CVE-2012-5182: The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents, which all...

Security readout for executives and security teams

CVE-2012-5182 is a privacy issue in the Android Loctouch app version 3.4.6 and earlier. A malicious app on the same device could use crafted Android intents to obtain sensitive logged-location information. The source bundle provides no CVSS score, active exploitation evidence, or confirmed fixed version. Exposure is most likely on legacy Android devices where Loctouch 3.4.6 or earlier is installed, especially if users are logged in or have saved location history. Enterprise exposure depends on whether the app exists in managed-device inventories. Moderate operational priority if the app is present in the environment; otherwise low. The business concern is privacy exposure of logged locations, not infrastructure compromise. Prioritize inventory, removal, or vendor-guided update decisions. Mitigation focus: Inventory Android devices for Loctouch installations and versions.; Remove Loctouch 3.4.6 or earlier where business use is unnecessary.; Check JVN, CVE, and vendor/app-store guidance for supported updates..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.