Security researchers have found serious vulnerabilities in many mobile advertising libraries that could be exploited to abuse the permissions of Android apps or to execute unauthorized code on users’ devices. The risks resulting from those vulnerabilities would be significantly lower if those libraries would use HTTPS, security researchers said. At least 47 percent of the top 40 ad libraries have this vulnerability in at least one of their versions that are in active use by popular apps on Google Play. Google added an annotation called @JavascriptInterface to limit the security risks starting with Android 4.2.”]

