The Tencent QQPhoto (com.tencent.qqphoto) application 0.97 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a password hash via a crafted application.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qqpphoto | Tencent | 0.97 (including) | 0.97 (including) |