MD5 is a weak hash known to have hash collisions.

Dear AppDynamics Security Team,

I am writing to report a security vulnerability identified in our codebase that involves the usage of the MD5 hash function.
The vulnerability associated with the MD5 hash function is that it is susceptible to hash collisions, which occur when two different input values produce the same hash value. This makes it possible for attackers to create malicious data that has the same hash as legitimate data, allowing them to bypass security measures and potentially cause harm.

Affected Path:

com/appdynamics/eumagent/runtime/p000private/bg.java

com/downloader/utils/Utils.java com/itextpdf/text/ImgJBIG2.java

com/itextpdf/text/pdf/PdfEncryption.java com/itextpdf/text/pdf/PdfSmartCopy.java

**Additional Context:** This issue was discovered during an internal security audit, and we wanted to bring it to your attention for review and remediation.

If you require further details or technical support regarding this report, please feel free to reach out.

Thank you,
MBRHE

まず、com/appdynamics/eumagent/runtime/p000private/bg.java、com/downloader/utils/Utils.java、および記載されている iText PDF ファイルでの MD5 の使用状況を調査します。どの使用がセキュリティに関わる動作に影響するかを判断し、それぞれのパスに適した修正方法を特定します。Done では、影響を受ける Android アプリケーションの動作を壊すことなく、報告されたすべての MD5 使用箇所に対応する必要があります。

索引モデルが issue の本文から書いたものです。