CVE-2016-10574

CVE-2016-10574 affects apk-parser3 versions prior to 0.1.3, a module designed to extract Android Manifest information from APK files. The vulnerability stems from the module downloading binary resources over unencrypted HTTP, making it susceptible to Man-in-the-Middle (MITM) attacks. This flaw carries a high severity CVSS score of 8.1, indicating a high potential for remote code execution (RCE) if an attacker can intercept and swap the requested binary with a malicious one. While the vulnerability is significant, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or community discussion surrounding this CVE.