CVE-2026-47364
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing opt-out. Impact: The Datadog user UUID and crash data are visible within Firebase Crashlytics. This UUID is not identifying outside Datadog's own systems.
Risk Assessment
Crash data and UUID may be visible to those with access to Firebase Crashlytics, potentially compromising user privacy, though the UUID is not directly linked to personal data outside Datadog.
Recommendation
Update the Datadog Android app to version v545-5.9.2 or later, which includes the fix.
Original NVD description (English source)
In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing opt-out. Impact: The Datadog user UUID and crash data are visible within Firebase Crashlytics. This UUID is not identifying outside Datadog's own systems.