Skip to content

v1.6.1

Latest

Choose a tag to compare

@muhfarsh muhfarsh released this 27 Aug 19:22

Security Fix

  • Fixed cross-app broadcast injection vulnerability in Android BroadcastReceiver registration (IVS_PLAYER_CONTROL). The receiver is now registered with ContextCompat.RECEIVER_NOT_EXPORTED, preventing external apps from controlling player playback.

Details

  • Affected versions: 1.6.0
  • Severity: Low (playback disruption only, no data exposure)