Questions tagged [android-security]

Tag used by Android in Security Alert messages to developers. The Security Alert message is often accompanied with a Google-Play rejection. AOSP instructions state to tag a question with it.

Tag used by Android in Security Alert messages to developers. The Security Alert message is often accompanied with a Google-Play rejection. AOSP instructions state to tag a question with it.

656 questions
0
votes
1 answer

Your app utilizes a version of Vitamio, a multimedia library used for playing various types of media files, containing a security vulnerability

I developed an app that'll stream a rtmp video. Before I used VitamioBundle-master. I upload my app in play store it shows some warning message for upgrading my app that has to use vitamio latest version. I download it from the link shown in that…
uma
  • 229
  • 1
  • 2
  • 6
0
votes
1 answer

NoClassDefFoundError: BouncyCastleProvider

I have an interesting problem on a specific Android version. So I include BouncyCastle dependency in Gradle like this: compile 'com.madgag.spongycastle:prov:1.51.0.0' and initialize security provider like this: import…
bvk256
  • 1,837
  • 3
  • 20
  • 38
0
votes
0 answers

cordova android - code and version not updated

I've recently tried to update an application on Google Play store, and received a reject from Google because of some vulnerabilities inside cordova. "The vulnerabilities were fixed in Apache Cordova v.4.1.1 or higher." So, I tried to update cordova…
user3197506
  • 197
  • 1
  • 2
  • 14
0
votes
1 answer

Protect Android Application From Moding

We have a challenge that reverse engineer modding our App and change some behavior of it and repack it. We added a App signature checking to code but the reverse engineer can found that part and disabled it. the another challenge is the third-party…
Sadegh Ghanbari
  • 1,271
  • 15
  • 29
0
votes
0 answers

cordova upgrade platform from 4.0.0 to 4.1.1 android build failed

After I get an email from google play store, that there are some vulnerability with android version < 4.1.1, I tried to upgrade cordova android platform to 4.1.1. What I did: cordova platform remove android cordova platform add android@4.1.1 After…
randomGuy
  • 63
  • 1
  • 10
0
votes
0 answers

Android USsd code runner

I was trying to send USSD using the below String ussdCode = mDataset.get(position).getCode(); if (ussdCode != null) { ussdCode = ussdCode.replace("#", Uri.encode("#")); …
user1214083
  • 122
  • 6
0
votes
1 answer

SKMaps Error When upload play store

Sorry but I have a problem when upload my app android to play store. The app use skobbler maps. And I use the version of skmaps that is in the example project (3.0.0) and I get Vulnerability Libpng library The vulnerabilities were fixed in libpng…
0
votes
1 answer

Google Play Warning: SSL Error Handler Vulnerability have a False Positive for WebViewClient.onReceivedSslErrorHandler SSL

I am contributor for a shared library project that just received notice one of our customers received this warning from the Google Play Store, Hello Google Play Developer, In July, the app submissions listed at the end of this email were…
Peter Nied
  • 1,820
  • 1
  • 13
  • 22
0
votes
1 answer

How to protect in-app purchases on ROOTED Android device?

If a device is rooted there are a lot of apps on the Play Market like Hide Root. I have disabled in-app-billing if the device is rooted by Fabric's built-in method. It does not work if I'm using such apps.
0
votes
1 answer

libpng in apk is insecure but can't find reference to that lib in my project

Everything is in the title, Google complains about a version of libpng in my apk that contains a security risk. But I don't include that library myself. I guess it is one of my included dependencies that includes it but I don't know how to find…
jav974
  • 1,022
  • 10
  • 22
0
votes
3 answers

Google Play store refused app based on a vulnerability, how can I prove I have removed it?

I downloaded the open source project Linphone, and build it accordingly, after building I imported the project in Eclipse and try some customisations in layouts, now I want to upload the app to Play store, but this error or rejection I…
Addi.Star
  • 475
  • 2
  • 15
  • 36
0
votes
0 answers

Why can't I change my android app version with phonegap?

I always get rejected to put my app on the google playstore. I think I am being rejected because I can't change the version number of the app. I have tried literally annything and I always get this email : When I type in npm info cordova version…
Jim Peeters
  • 2,573
  • 9
  • 31
  • 53
0
votes
1 answer

APK rejected from Google Play because Cordova is too old, but Cordova is up to date

Here are the versions installed: matt@dev ~/Projects/proj-mobile (release) cordova platforms ls Installed platforms: android 5.2.2 ios 4.2.1 Available platforms: amazon-fireos ~3.6.3 (deprecated) blackberry10 ~3.8.0 browser ~4.1.0 …
mattalxndr
  • 9,143
  • 8
  • 56
  • 87
0
votes
1 answer

Is it possible to remote android phone from a Bluetooth device?

I have a Bluetooth device which can receive a data from the android phone. When it receive a string as 'Request', the device will send a control message to the phone 'Open'. Based on the control message, the android phone can call an Intent service…
Jame
  • 3,746
  • 6
  • 52
  • 101
0
votes
0 answers

How to fix apps containing an unsafe implementation of 'TrustManager'?

https://support.google.com/faqs/answer/6346016,I removed the code that related to TrustManager,but still google play rejected me. why this happen, how to solve?
idengpan
  • 41
  • 5