Texture Canada Android & iOS Applications - Unencrypted Third Party Analytics (CVE-2019-8632)
"Texture: Unlimited access to over 100 of the world's best magazines on your computer, smartphone or tablet."
The Texture Canada Android & iOS applications (Android version 126.96.36.199, iOS version 5.11.6 and below) sends potentially sensitive information such as number of app launches, device model,
Android or iOS version and screen resolution, unencrypted to a third party site (ScorecardResearch).
An attacker who can monitor network traffic could capture potentially sensitive information about the user's device without their knowledge.
July 10, 2018 - Attempted to notify Texture of the issue via firstname.lastname@example.org
July 10, 2018 - Attempted to notify Texture of the issue via email@example.com
July 12, 2018 - Provided the details of the issue to Apple via firstname.lastname@example.org
May 9, 2019 - Published an advisory to document the issue
Upgrade to Android version 188.8.131.52 or iOS version 5.11.10 (U.S. versions are also affected but have not been tested)