Scan reveals known open source vulnerabilities in popular Android apps

guest · Sep 12, 2018

Scan reveals known open source vulnerabilities in popular Android apps
September 12, 2018
https://www.helpnetsecurity.com/2018/09/12/vulnerabilities-popular-android-apps/

ACI’s research team used Insignary’s Clarity binary code scanner to examine the ten most popular applications in the 33 main app categories in Google Play Store, and found that 105 out of 330 contained known (CVE-numbered) vulnerabilities in their open source components.
The findings
The vulnerabilities range from low to critical, and can be exploited to compromise consumer and enterprise devices, to perform data theft, identity theft, fraud or corporate espionage.

“Critical vulnerabilities were found in many common applications, including some of the most popular banking, event ticket purchasing and travel apps,” the researchers noted.

“For example, Wells Fargo and Bank of America mobile apps each contained over 30 critical vulnerabilities. Other unpatched apps with critical vulnerabilities, according to Clarity’s scan, included Sephora, Vivid Seats, TripAdvisor and a wide array of applications that extensively use personal or financial information.”
Click to expand...

Study (PDF): http://www.theamericanconsumer.org/wp-content/uploads/2018/12/8.5x11_VZ_American-Consumer-Institute_Popular-Apps_D2.pdf

Log in or Sign up

Scan reveals known open source vulnerabilities in popular Android apps

guest Guest

Log in or Sign up

Scan reveals known open source vulnerabilities in popular Android apps

guest Guest

Useful Searches