This vulnerability affects the Meesho Online Shopping App on Android versions 27.0 through 27.3. It stems from the use of a risky cryptographic algorithm in an unspecified function of the /api/endpoint within the com.meesho.supply component. The vulnerability is remotely exploitable without user interaction or privileges but requires high attack complexity. The CVSS 4.0 base score is 6.3, indicating medium severity. No official remediation or patch is currently available, and no known active exploitation has been reported.

The vulnerability could potentially allow an attacker to compromise cryptographic protections within the app, possibly affecting data confidentiality or integrity. However, the attack complexity is high, and there are no known exploits in the wild, which limits immediate risk. The lack of privileges and user interaction required reduces the attack surface somewhat, but the risky cryptographic algorithm could weaken security guarantees of the app's communications or data handling.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from Meesho and apply them promptly once available. No specific temporary mitigations are documented.