CVE-2016-10702

Published: Nov 28, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Exploitability: 1.8 / Impact: 4.2

Source: NVD

Description

Pebble Smartwatch devices through 4.3 mishandle UUID storage, which allows attackers to read an arbitrary application's flash storage, and access an arbitrary application's JavaScript instance, by modifying a UUID value within the header of a crafted application binary.

Affected (1)

Products: Pebble: Pebble Firmware

1 product

Pebble Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pebble Pebble Firmware	Up to 4.3

Running on/with	Platform Versions
Pebble Pebble	All versions

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://blog.fletchto99.com/2016/november/pebble-app-sandbox-escape/

Source: cve@mitre.org

Third Party Advisory

https://blog.fletchto99.com/2016/november/pebble-app-sandbox-escape/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.