A recently patched security vulnerability in the EngageLab SDK, a widely used third-party Android software development kit, has been found to put millions of users at risk, including those with cryptocurrency wallets.
The vulnerability, which has been addressed, could have allowed apps on the same device to bypass Android’s security sandbox and gain unauthorized access to private data.
According to reports, the EngageLab SDK flaw could have affected up to 50 million Android users, with a significant portion of them being cryptocurrency wallet users, estimated to be around 30 million.
The discovery of this vulnerability highlights the importance of ensuring the security and integrity of third-party SDKs used in Android app development.
Users are advised to keep their devices and apps up to date to prevent potential exploitation of such vulnerabilities.
Source: Original Article
