Medium severity6.5NVD Advisory· Published Aug 22, 2023· Updated Jun 17, 2026

CVE-2021-43171

Description

Improper verification of applications' cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in control of the application server to install malicious applications on user's systems by altering the server's API response.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

E.foundation/App Lounge
cpe:2.3:a:e.foundation:app_lounge:*:*:*:*:*:android:*:*
Range: <0.19q
/e/OS/App Loungedescription
E/OS/App Loungellm-create
Range: <0.19q

Patches

Vulnerability mechanics

References

nervuri.net/e/appsnvdThird Party Advisory
gitlab.e.foundation/e/os/releases/-/releases/v0.19-qnvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000