Applications

Ruminations on App CVEs

Issues associated with many apps’ CEVs.

On detecting and preventing the Samsung IME Keyboard / SwiftKey language pack update vulnerability

Our security researcher Ryan Welten discovered a vulnerability in the Samsung IME Keyboard / language pack update.

Remote Code Execution as System User on Samsung Phones

We examine a security vulnerability of Samsung devices.

A Pattern for Remote Code Execution using Arbitrary File Writes and MultiDex Applications

We examine vulnerabilities that allow attackers to execute code remotely on an Android userUs device.

Understanding Android’s Application Update Cycles

Apps need regular updates to remain secure. We examine the frequency of updates.