Skip to content
NewA calmer, faster ZeroHour
Researchinfo

Callix Detects Access Control Flaws in Android Firmware

Original title: Beyond Sensitive APIs: Detecting Access Control Flaws at Sensitive Callsites in Android Firmware

arXiv cs.CRby Haotian Deng ()1 min read
Read at arxiv.org
AI summary · x-ai/grok-4.7Summaries by Vani AI

Callix found 819 vulnerable paths in 1,750 pre-installed Android apps.

Callix jointly analyzes API functionality and data at callsites to assess sensitivity. It recovers security checks as explicit properties and applies restriction context to evaluate sufficiency. The tool was evaluated on apps from the 10 top-tier Android vendors.

Key facts
  • Evaluated on 1,750 pre-installed apps
  • Discovered 819 vulnerable paths
  • 42.1% allow private data via generic DB ops
  • 95.1% precision in 60% sample validation
  • Many findings rewarded via bug bounties
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
androidfirmwareaccess-controlstatic-analysis

From the original article

1 min read at arxiv.org

Existing studies of vulnerable pre-installed Android apps identify dangerous behavior by checking whether an app invokes an API from a predefined set of security-sensitive APIs.

arXiv cs.CR

By Haotian Deng · arxiv.org

Read the full article at arXiv cs.CR

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.