CVE-2013-7372

The engineNextBytes function in the SecureRandom implementation within Apache Harmony (through version 6.0M3 ) contains a logic flaw. When no user seed is provided, the component uses an incorrect offset value , leading to PRNG predictability . This vulnerability affects the Java Cryptography Arc...