ShareIt's incredible success of a billion Android downloads and 1.8 billion users worldwide (there are also iOS, Windows, and Mac apps) has led to what looks like an incredible amount of app bloat. The security firm says it shared these vulnerabilities with ShareIt three months ago, but the company has yet to issue patches. Trend Micro says compromising the app can lead to remote code execution. It can delete apps, run at startup, create accounts and set passwords, and do a whole lot more. According to the Play Store permissions readout, ShareIt requests access to the entire user storage and all media, the camera and microphone, and location.

The report says ShareIt's vulnerabilities can 'be abused to leak a user's sensitive data and execute arbitrary code with ShareIt permissions.' ShareIt's permissions, as a local file-sharing app, are pretty extensive. ShareIt has been downloaded over a billion times from the Play Store, and, according to App Annie, was one of the 10 most globally downloaded apps in 2019. The app was originally developed by Lenovo (it has since spun off into its own company) and for a time was pre-installed on Lenovo phones. Trend Micro says it has found 'several' security flaws in the popular Android app ShareIt.

Shareitapp