Vulnerable Implicit Service
Lingguang Lei, Yi He, Kun Sun, Jiwu Jing, Yuewu Wang, Qi Lecky Li, Jian Weng · 2017
The services in Android applications can be invoked either explicitly or implicitly before Android 5.0. However, since the implicit service invocations suffer service hijacking attacks and thus lead to sensitive information leakage, they have been forbidden since Android 5.0. Thereafter since the Android system will simply throw an exception and crash the application that still invokes services implicitly, it was expected that application developers will be forced to convert the implicit service invocations to explicit ones by specifying the package name of the service to be called.