prng_uninit (void)
{
  free (nonce_data);
  nonce_data = NULL;
  nonce_md = NULL;
  nonce_secret_len = 0;
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.