Pebble Smartwatch devices through 4.3 mishandle UUID storage, which allows attackers to read an arbitrary application\'s flash storage, and access an arbitrary application\'s JavaScript instance, by modifying a UUID value within the header of a crafted application binary.