CVE-2017-15582

CVE-2017-15582 describes a critical vulnerability in the "Diary with lock" (aka WriteDiary) Android application version 4.72, where hardcoded encryption keys (SecretKey and iv) are used for AES encryption. This flaw allows attackers to easily decrypt stored diary entries, leading to a high-impact compromise of confidentiality. Rated with a CVSS score of 7.5 (High), this vulnerability is remotely exploitable with low attack complexity, requiring no user interaction. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the inherent weakness of hardcoded cryptographic parameters makes this a notable security risk.