Reference detail

CWE-347 — Improper Verification of Cryptographic Signature

Recorded findings mapped to this weakness category. Review the detection and its context in the app report.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (1)

v1-only APK signature

Adopt APK Signature Scheme v2/v3 — v1-only signing is exposed to the Janus (CVE-2017-13156) tampering class.

Browse this category

Apps with mapped findings

Reset

0 matching apps · Counts below include only this page’s mapped finding types.

No recorded apps match these filters. Missing findings do not establish a pass.