Skip to content

Bug - Anti-uninstall protection bypass on Android 9 #155

@ziptar

Description

@ziptar

Description

The Anti-Uninstall feature fails to prevent the application from being deleted. Even when the protection is toggled ON, a user can still uninstall the app via the system settings or the home screen without being prompted for a PIN/Pattern or having the uninstallation blocked.

Steps to Reproduce

  1. Open the app and navigate to Settings.
  2. Enable the Anti-Uninstall Protection (ensure Device Administrator or necessary permissions are granted).
  3. Exit to the home screen.
  4. Long-press the app icon and select Uninstall (or go to System Settings > Apps > [App Name] > Uninstall).
  5. Observe that the app is removed without any restriction.

Expected Behavior

The app should intercept the uninstallation attempt. It should either:

  • Prompt for the app's security PIN/Pattern before allowing the Device Administrator permission to be deactivated.
  • Prevent the "Uninstall" button from being clickable in the System Settings.

Actual Behavior

The system proceeds with the uninstallation immediately, bypassing the internal security logic designed to protect the app.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions