Version 1.1.6-free of Chameleon Mini Live Debugger on Google Play Store may have had its sources or permissions tampered by a malicious actor. The official maintainer of the package is recommending all users upgrade to v1.1.8 as soon as possible. For more information, review the referenced GitHub Security Advisory.
Weakness
The product contains code that appears to be malicious in nature.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chameleon_mini_live_debugger | Chameleon_mini_live_debugger_project | 1.1.6 (including) | 1.1.6 (including) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/442.html
- https://cwe.mitre.org/data/definitions/448.html
- https://cwe.mitre.org/data/definitions/636.html
References
- https://github.com/maxieds/ChameleonMiniLiveDebugger/security/advisories/GHSA-8q77-7hq8-f7g6
- https://play.google.com/store/apps/details?id=com.maxieds.chameleonminilivedebugger\u0026hl=en_US
- https://github.com/maxieds/ChameleonMiniLiveDebugger/security/advisories/GHSA-8q77-7hq8-f7g6
- https://play.google.com/store/apps/details?id=com.maxieds.chameleonminilivedebugger\u0026hl=en_US