VYPR

Swiftkey SDK

by Swiftkey

Source repositories

CVEs (2)

  • CVE-2015-4641Jun 19, 2015
    risk 0.00cvss epss 0.04

    Directory traversal vulnerability in the SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices allows remote web servers to write to arbitrary files, and consequently execute arbitrary code in a privileged context, by leveraging control…

  • CVE-2015-4640Jun 19, 2015
    risk 0.00cvss epss 0.01

    The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE:…