The vulnerability of the OpenKeychain data encryption and digital signature verification program lies in the insufficient protection of operational data, allowing attackers to gain unauthorized access to the protected information.

The vulnerability of the OpenKeychain data encryption and digital signature verification program is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the protected information...

PT-2023-9024 · Unknown · Openkeychain

Name of the Vulnerable Software and Affected Versions: OpenKeychain affected versions not specified Description: The issue is related to insufficient protection of service data in the OpenKeychain program for data encryption and electronic digital signature verification. Exploitation of this issu...

PT-2024-03: Vulnerability of reading internal application files in OpenKeychain

The vulnerability was identified in OpeKeychain v.5.8.2 58902. It allows a potential attacker to read any files available to an application including from the application sandbox and save files to external storage. The vulnerability is caused by insufficient filtering of input parameters...

OpenKeychain: Easy PGP - Customized SSL, Exported ContentProvider, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application OpenKeychain: Easy PGP published at the 'play' market has multiple vulnerabilities...

Data Leaking 'Surreptitious Sharing' Vulnerability Identified in Android API

Researchers have identified a vulnerability in an Android API used by messaging apps such as Skype and perhaps more concerning, privacy-centric apps such as Signal, and Telegram, that could lead to privilege escalation and data loss including private keys. Dominik Schürmann and Lars Wolf,...