PatchTheCVECVE-2018-10812: The Bitpie application through 3.2.4 for Android and iOS uses cleartext storage for digital currency initial k
CVE-2018-10812 is a medium-severity flaw (CVSS 4.1) affecting bitcoin wallet, bitcoin wallet. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The Bitpie application through 3.2.4 for Android and iOS uses cleartext storage for digital currency initial keys, which allows local users to steal currency by leveraging root access to read /com.biepie/shared_prefs/com.bitpie_preferences.xml (on Android) or a plist file in the app data folder (on iOS).
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 4.1 (Medium) |
| Attack vector | Local |
| Attack complexity | High |
| Privileges needed | High |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 94%) |
| CISA exploited list | No |
| Weakness | CWE-312 |
| Published | 2018-05-08 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2018-10812?
bitcoin wallet: upgrade to newer than 3.2.4; bitcoin wallet: upgrade to newer than 3.2.4. Exact commands for each OS are on this page.
Is CVE-2018-10812 being exploited?
CVE-2018-10812 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2018-10812 affect?
CVE-2018-10812 affects bitcoin wallet, bitcoin wallet. Severity is medium (CVSS 4.1). The Bitpie application through 3.2.4 for Android and iOS uses cleartext storage for digital currency initial keys, which allows local users to steal currency by leveraging root access to read /com.biepie/shared_prefs/com.bitpie_preferences.
How urgent is CVE-2018-10812?
Priority 16/100. No elevated risk signals yet.
Software pages
Android vulnerabilities · iOS vulnerabilities
Related CVEs
- CVE-2018-1000022 MEDIUM 5.3 UPGRADE Electrum Technologies GmbH Electrum Bitcoin Wallet version prior to version 3.0.5 contains a Missing Authoriza