Skip to content
OpenAdvisories

Product · Google

YouTube Android Player API SDK

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2023-0460

    Remote code execution in YouTube Android Player API SDK

    The YouTube Embedded 1.2 SDK binds to a service within the YouTube Main App. After binding, a remote context is created with the flags Context.CONTEXT_INCLUDE_CODE | Context.CONTEXT_IGNORE_SECURITY. This allows the client app to remotely load code from YouTub…

    Google YouTube Android Player API SDK Android