PatchTheCVEcardboard vulnerabilities and fixes
Recent CVEs affecting cardboard, with upgrade or downgrade steps. 2 tracked.
cardboard has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-11-08. Highest priority: CVE-2001-1584 (score 46/100).
- CVE-2018-19111 MEDIUM 5.3 DOWNGRADE DOWNGRADE The Google Cardboard application 1.8 for Android and 1.2 for iOS sends potentially private cleartext informati
- CVE-2001-1584 HIGH 7.5 DOWNGRADE CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via
FAQ
How do I fix cardboard vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cardboard being exploited right now?
None of the tracked cardboard CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cardboard CVE should I patch first?
CVE-2001-1584 currently ranks highest (46/100): CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via .