Blog | G5 Cyber Security

Vulnerability in Google Play Core Library Remains Unpatched in Google Play Applications

A new vulnerability for the Google Play Core Library was published in late August, which allows Local-Code-Execution (LCE) within the scope of any application that has the vulnerable version of the Google play Core Library. The vulnerability lies within the combination of the two features mentioned above, and also utilizes file traversal, a concept as old as the internet itself. Facebook and Instagram alone are responsible for 5 billion and 1 billion downloads to date, respectively, from Google Play Store. Imagine the number of devices that were impacted by this vulnerability.”]

Source: https://research.checkpoint.com/2020/vulnerability-in-google-play-core-library-remains-unpatched-in-google-play-applications/

Exit mobile version