CVE-2017-13100

CVE-2017-13100 affects DistinctDev, Inc.’s iOS app “The Moron Test” (v6.3.1). The root cause is a hard-coded encryption key used to protect stored data, enabling data decryption by anyone who can access the key. Public documentation confirms the impact is data confidentiality compromise due to in...

Android and iOS apps contain multiple vulnerabilities

Overview Android apps, including those pre-installed on some mobile devices, contain multiple vulnerabilities. All of these vulnerabilities were reported by Kryptowire. Vulnerabilities in pre-installed apps were presented at DEF CON 26 and a set of different vulnerabilities were previously...