TLDR InfoSec · ATTACKS & VULNERABILITIES
GOOGLE WILL UPDATE PIXEL PHONES TO REMOVE VERIZON'S UNSAFE DEMO APP
Summary from the TLDR InfoSec newsletter
Security researchers discovered a vulnerable app called Showcase.apk that was included in numerous Pixels' firmware without any way to remove it. Google has clarified that this app is used in Verizon demo phones and has committed to removing it in a future update. There is no evidence that the app has been exploited as an attacker would first require physical access and a user's password to install the app, which provides numerous other attack vectors.