CVE-2022-38117: Juiker

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it.

Affected products

• Juiker Juiker: version 4.6.0311.1 only

Published 2022-10-24. Last modified 2026-06-17.