ESET research shows that Android stalkerware apps are affected by vulnerabilities that further threaten victims. The issue could be exploited to take over the victims device, it could also threaten the victim by uploading fabricated evidence. The researchers disclosed the flaw to the development team following their 90-day coordinated disclosure policy. At the time of this writing, only six vendors have addressed the flaws discovered by the researchers, and only seven vendors plan to fix them, and in one case a vendor decided not to fix the reported issues.”]
Source: https://securityaffairs.co/wordpress/118023/malware/android-stalkerware.html