The Bump application for Android does not properly handle implicit intents, which allows attackers to obtain sensitive owner-name information via a crafted application.Referenceshttp://jvn.jp/en/jp/JVN08994136/index.htmlhttp://jvndb.jvn.jp/jvndb/JVNDB-2014-000109
