CVEs-PoC/2017/CVE-2017-13309.md

CVE-2017-13309

Description

In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

POC

Reference

No PoCs from references.

Github

• https://github.com/A-TPL-Bench/LibHunter
• https://github.com/Anonymous-Phunter/PHunter
• https://github.com/CGCL-codes/LibHunter
• https://github.com/CGCL-codes/PHunter
• https://github.com/LibHunter/LibHunter