CVE-2019-13096: Critical severity tronlink wallet vulnerability
TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read and reuse the user keystore of a valid user via /data/data/com.tronlink.wallet/sharedprefs/<wallet-name>.xml to gain unauthorized access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-13096?
CVE-2019-13096 has a high severity rating due to the potential for unauthorized access to user wallet keystores.
How do I fix CVE-2019-13096?
To mitigate CVE-2019-13096, update to a later version of TronLink Wallet that addresses the insecure storage of keystores.
Who is affected by CVE-2019-13096?
Users of TronLink Wallet version 2.2.0 on Android are affected by CVE-2019-13096.
What type of data is exposed in CVE-2019-13096?
CVE-2019-13096 exposes user wallet keystore data stored in plaintext.
What should I do if I used TronLink Wallet version 2.2.0?
If you used TronLink Wallet version 2.2.0, consider migrating your wallet data and ensure to update to a secure version.