Skip to content

Deprecated Target API Version

Description

The android:targetSdkVersion attribute specifies the Android Target API level required by the application. Setting a low targetSdkVersion may allow the application to run on older Android versions but could expose users to security vulnerabilities.

Here is a link with the deprecation notice: https://support.google.com/googleplay/android-developer/answer/11926878?hl=en

Recommendation

Consider setting the android:targetSdkVersion attribute to a value that corresponds to a more recent Android API level. This can help ensure that the application benefits from security improvements and reduces the risk of vulnerabilities associated with older Android releases.

Detect this with Ostorlab

Ostorlab checks Android and iOS apps for this issue.

Scan your app free

Standards

  • PCI_STANDARDS:
    • REQ_6_2
    • REQ_6_3
  • OWASP_MASVS_v2_1:
    • MASVS_CODE_1
  • HIPAA_CONTROLS:
    • SECURITY212
    • SECURITY213
    • SECURITY255
    • SECURITY258
  • OWASP_MOBILE_TOP_10:
    • M2_2024