Deprecated Target API Version

Deprecated Target API Version

Risk: low

Description

The android:targetSdkVersion attribute specifies the Android Target API level required by the application. Setting a low targetSdkVersion may allow the application to run on older Android versions but could expose users to security vulnerabilities.

Here is a link with the deprecation notice: https://support.google.com/googleplay/android-developer/answer/11926878?hl=en

Recommendation

Consider setting the android:targetSdkVersion attribute to a value that corresponds to a more recent Android API level. This can help ensure that the application benefits from security improvements and reduces the risk of vulnerabilities associated with older Android releases.

Links

• Android API Levels
• Target API level deprecation notice

Standards

• PCI_STANDARDS:
  • REQ_6_2
  • REQ_6_3
• OWASP_MASVS_v2_1:
  • MASVS_CODE_1