APK vulnerability