Security Evaluation of Android apps in budget African Mobile Devices
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2025
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866915508833484800 |
|---|---|
| author | Diallo, Alioune Diop, Anta Kabore, Abdoul Kader Samhi, Jordan Pilgun, Aleksandr Bissyande, Tegawendé F. Klein, Jacque |
| author_facet | Diallo, Alioune Diop, Anta Kabore, Abdoul Kader Samhi, Jordan Pilgun, Aleksandr Bissyande, Tegawendé F. Klein, Jacque |
| contents | Android's open-source nature facilitates widespread smartphone accessibility, particularly in price-sensitive markets. System and vendor applications that come pre-installed on budget Android devices frequently operate with elevated privileges, yet they receive limited independent examination. To address this gap, we developed a framework that extracts APKs from physical devices and applies static analysis to identify privacy and security issues in embedded software. Our study examined 1,544 APKs collected from seven African smartphones. The analysis revealed that 145 applications (9%) disclose sensitive data, 249 (16%) expose critical components without sufficient safeguards, and many present additional risks: 226 execute privileged or dangerous commands, 79 interact with SMS messages (read, send, or delete), and 33 perform silent installation operations. We also uncovered a vendor-supplied package that appears to transmit device identifiers and location details to an external third party. These results demonstrate that pre-installed applications on widely distributed low-cost devices represent a significant and underexplored threat to user security and privacy. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2509_18800 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Security Evaluation of Android apps in budget African Mobile Devices Diallo, Alioune Diop, Anta Kabore, Abdoul Kader Samhi, Jordan Pilgun, Aleksandr Bissyande, Tegawendé F. Klein, Jacque Cryptography and Security Software Engineering Android's open-source nature facilitates widespread smartphone accessibility, particularly in price-sensitive markets. System and vendor applications that come pre-installed on budget Android devices frequently operate with elevated privileges, yet they receive limited independent examination. To address this gap, we developed a framework that extracts APKs from physical devices and applies static analysis to identify privacy and security issues in embedded software. Our study examined 1,544 APKs collected from seven African smartphones. The analysis revealed that 145 applications (9%) disclose sensitive data, 249 (16%) expose critical components without sufficient safeguards, and many present additional risks: 226 execute privileged or dangerous commands, 79 interact with SMS messages (read, send, or delete), and 33 perform silent installation operations. We also uncovered a vendor-supplied package that appears to transmit device identifiers and location details to an external third party. These results demonstrate that pre-installed applications on widely distributed low-cost devices represent a significant and underexplored threat to user security and privacy. |
| title | Security Evaluation of Android apps in budget African Mobile Devices |
| topic | Cryptography and Security Software Engineering |
| url | https://arxiv.org/abs/2509.18800 |