Security News > 2020 > November > GO SMS Pro Android App Exposes Private Photos, Videos and Messages

A security weakness discovered in the GO SMS Pro Android app can be exploited to publicly expose media sent using the app, according to researchers.

The GO SMS Pro application is a popular messenger app with more than 100 million downloads from the Google Play store.

Researchers at Trustwave SpiderLabs said that private voice messages, videos messages and photos are all at risk of being compromised by a trivially exploitable flaw in version 7.91.

When a user sends a multimedia message, the recipient can receive it even if they don't themselves have GO SMS Pro installed.

Users should upgrade to the latest version in case it addresses the bug, but to ensure that content remains private, "It is highly recommended to avoid sending media files via the app that you expect to remain private or that may contain sensitive data using this popular messenger app, at least until the vendor acknowledges this vulnerability and remediates it," according to SpiderLabs.

News URL

https://threatpost.com/go-sms-pro-android-app-exposes-private-photos/161407/