CVE-2019-13096

PoC ×2—

CVSS 3.0

9.8 critical

EPSS

1%p65

Published

Jul 22, 2019 (Jul 22, 2019)

Modified

Jun 17, 2026

Description

TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read and reuse the user keystore of a valid user via /data/data/com.tronlink.wallet/shared_prefs/ .xml to gain unauthorized access.

Vendors: tronlink
Products: wallet
Weakness: CWE-312
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.