CVE-2017-13106

CVE-2017-13106 describes a critical vulnerability in Cheetahmobile CM Launcher 3D (version 5.0.3 and earlier) where the Android application utilizes a hard-coded encryption key. This design flaw allows any attacker with access to this key to decrypt sensitive data encrypted by the application. With a CVSS score of 7.5 (HIGH), this vulnerability presents a significant risk due to its network-based attack vector and low attack complexity, potentially leading to a complete compromise of confidentiality. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the inherent risk remains high given the ease of exploitation once the key is discovered.