Home / Vulnerability Database / Android : Privacy violation (String usage)
Android

Android : Privacy violation (String usage)

Overview

The content of the String object can not be deleted from memory by the software. Valuable data leak is possible.

If valuable data (passwords, credit card numbers, etc.) is not deleted from memory immediately after use, leak is possible. String objects are immutable; their values can only be removed by the JVM garbage collector. The garbage collector does not run until the virtual machine runs out of memory. Memory dump created in the case of process emergency stop may contain confidential information.

MEDIUM

DerScanner Severity Score

Do you want to fix Android : Privacy violation (String usage) in your application?

See also

Android

Android : Debug mode on

Android

Android : Error handling: generic exception

Android

Android : HTTP usage