6.2Orta
CVE-2026-124599Hardcoded RSA Private Key and Public Key Exposure in GV-Face Android Application v2.2.1
Açıklama
The RSA cryptographic key material, including a private key and public key, is embedded within the application package. Because Android applications can be extracted and reverse engineered, storing private cryptographic keys directly inside the client application may allow an attacker to recover the keys and potentially use them to impersonate the application, decrypt protected data, or generate unauthorized cryptographic operations.
Zayıflık türü (CWE):
CWE-321
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| GeoVision Inc. | GV-Face | 2.2.1, fixed 2.2.2 |