PT-2025-39172 · Coinomi · Coinomi

Published 2025-09-23 · Updated 2025-09-23 · CVE-2017-20200

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Coinomi versions up to 1.7.6

Description A vulnerability exists in Coinomi that involves the cleartext transmission of sensitive information due to an issue with some unknown processing. This manipulation can be initiated remotely and is considered difficult to exploit, with high complexity. The exploit has been publicly disclosed. The vendor has stated there is no security implication associated with the findings.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-310

CWE-319

Related Identifiers

CVE-2017-20200

Affected Products

Coinomi

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2017-20200 · Security Note
• https://vuldb.com/?ctiid.325143 · Note
• https://web.archive.org/web/20171013065745/https://github.com/Coinomi/coinomi-android/issues/213#issuecomment-332371549 · Note
• https://t.me/CVEtracker/33167 · Telegram Post
• https://reddit.com/r/CryptoCurrency/comments/72osq7/security_warning_coinomi_wallet_transmits_all/dnkhpob · Note
• https://reddit.com/r/Bitcoin/comments/72yvnj/so_coinomis_official_response_on_the · Note
• https://vuldb.com/?submit.653875 · Note
• https://vuldb.com/?id.325143 · Note
• https://web.archive.org/web/20171013065745/https://github.com/Coinomi/coinomi-android/issues/213 · Note