Repository navigation
Security Fix
- Fixed cross-app broadcast injection vulnerability in Android BroadcastReceiver registration (IVS_PLAYER_CONTROL). The receiver is now registered with ContextCompat.RECEIVER_NOT_EXPORTED, preventing external apps from controlling player playback.
Details
- Affected versions: 1.6.0
- Severity: Low (playback disruption only, no data exposure)