« All posts

The Advisory Said It Was Fixed. I Didn't Believe It Until I Broke It Myself.

An engineer tested the CVE-2026-39973 vulnerability in apktool, emphasizing the importance of real testing over mere advisories.

An engineer conducted a personal test on apktool's CVE-2026-39973 vulnerability. This investigation highlighted that security fixes are not enough in writing; real testing is crucial. By observing the file-writing behavior between the old and new versions, the engineer demonstrated the actual implications of the vulnerability.