Google Pixel Devices Found Vulnerable Due To Pre-Installed App

Security researchers have identified a new vulnerability affecting Google Pixel devices that has been present for several years. An Android application package called “Showcase.apk” that has been shipped with Google Pixel devices since 2017 has made them vulnerable due to unnecessary system privileges.

Google Pixel Devices Vulnerable To RCE Attacks

Researchers from iVerify have uncovered a serious security vulnerability affecting Google Pixel devices. They found that the pre-installed Android APK, “Showcase.apk,” has granted excessive system privileges, making the devices susceptible to code execution attacks.

According to the researchers, the Showcase.apk package was developed by Smith Micro, a software company that offers remote access, parental control, and data-clearing tools.

While the app itself is not malicious, it poses a risk due to functions like retrieving configuration files over unsecure connections. Because the app operates at the system level, it could be exploited for various attacks such as MiTM attacks, code injection, or spyware deployment.

Google has been informed about the vulnerability, and they have confirmed that future updates will address the issue. They mentioned that the app will be removed from supported Pixel devices with an upcoming software update.

Google To Address The Matter

iVerify disclosed the vulnerability to Google and after the 90-day period, made the details public. Google has stated that the issue will be patched in future updates and clarified that the exploitation of the app would require physical access to the device and the user’s password.

The researchers also confirmed that the app is disabled by default on most devices and that the threat can only become real if the app is manually enabled. With future updates from Google to remove the app, the vulnerability should no longer pose a threat to Google Pixel users.

Users are advised to update their devices promptly when they receive system updates to ensure they are protected from potential threats.