CVE-2017-11133

CVE-2017-11133 describes a cryptographic weakness in heinekingmedia StashCat applications across Android, Web, and Desktop platforms, where messages are encrypted using AES in CBC mode with a pseudo-random secret and IV derived from math.random(). This method is not cryptographically strong, making the encryption vulnerable. The vulnerability has a CVSS score of 7.5 (High), indicating a network-based attack with low complexity, requiring no user interaction, and potentially leading to high confidentiality impact by allowing an attacker to decrypt communications. There is no evidence of active exploitation, nor is exploit code publicly available in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting low public awareness and attention.