CVE-2013-7372

The engineNextBytes function in the SecureRandom implementation within Apache Harmony (through version 6.0M3 ) contains a logic flaw. When no user seed is provided, the component uses an incorrect offset value , leading to PRNG predictability . This vulnerability affects the Java Cryptography Arc...

PT-2014-3401

Name of the Vulnerable Software and Affected Versions Apache Harmony versions through 6.0M3 Android versions prior to 4.4 Description The issue concerns the SecureRandom implementation, specifically the engineNextBytes function in the SHA1PRNG SecureRandomImpl class. When no seed is provided, it...