CVE-2016-10632

CVE-2016-10632 affects the apk-parser2 module, which is used to extract Android Manifest information from APK files. The vulnerability stems from the module downloading binary resources over unencrypted HTTP, making it susceptible to Man-in-the-Middle (MITM) attacks. With a CVSS score of 8.1 (HIGH), this flaw allows an attacker to potentially achieve remote code execution (RCE) by intercepting and replacing the requested binary with a malicious one. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.