Security News > 2020 > December > Android Messenger App Still Leaking Photos, Videos

The GO SMS Pro Android app has published two new versions on Google Play since a major security weakness was disclosed in November - but neither fixes the original issue, leaving 100 million users at risk for privacy violations, researchers said.

That's according to Trustwave SpiderLabs, which originally discovered a security issue that can be exploited to publicly expose private voicemails, video missives and photos sent using the popular messenger app.

With GO SMS Pro, when a user sends a multimedia message, the recipient can receive it even if they don't themselves have the app installed.

A new version of the app was uploaded to the Play Store the day before the original Trustwave advisory on Nov. 19; followed quickly by a second updated version on Nov. 23.

As for the new versions, "It seems like is attempting to fix the issue, but a complete fix is still not available in the app," researchers explained.

News URL

https://threatpost.com/android-messenger-app-leaking-photos-videos/161741/