Code Quality & Build Config
Debuggable release builds, no obfuscation, verbose error handling that leaks stack traces, a bundled dependency with a known CVE, and an optional native buffer-overflow demo.
5 vulnerabilities. OWASP Mobile: M7
| Vulnerability | ID | Platform | Difficulty | OWASP | MASVS | MASWE | MASTG (v2) | CWE |
|---|---|---|---|---|---|---|---|---|
| Debuggable Release Build | debuggable_release_build | AndroidiOS | EASY | M7 | MASVS-RESILIENCE-4MASVS-CODE-2 | MASWE-0063 | MASTG-TEST-0226MASTG-TEST-0261 | CWE-489 |
| No Obfuscation / Symbol Stripping | no_obfuscation | AndroidiOS | EASY | M7 | MASVS-RESILIENCE-3 | MASWE-0059 | MASTG-TEST-0051MASTG-TEST-0093 | CWE-656 |
| Verbose Error Handling (leaked stack traces) | verbose_error_handling | AndroidiOS | EASY | M7 | MASVS-CODE-2 | MASWE-0061 | MASTG-TEST-0041MASTG-TEST-0084 | CWE-209CWE-497 |
| Vulnerable Dependencies (known CVE) | vulnerable_dependencies | AndroidiOS | MEDIUM | M7 | MASVS-CODE-3 | MASWE-0044 | MASTG-TEST-0272MASTG-TEST-0273MASTG-TEST-0274MASTG-TEST-0275 | CWE-1104CWE-937 |
| Native Code Memory Bugs (JNI buffer overflow) | native_code_memory_bugs | AndroidiOS | HARD | M7 | MASVS-CODE-4 | MASWE-0050 | MASTG-TEST-0043MASTG-TEST-0086 | CWE-120CWE-787 |