Microsoft researchers have uncovered a new attack named “Dirty Stream” caused by a common security vulnerability affecting numerous Android applications, including some with over 500 million installations each, leaving them susceptible to remote code execution (RCE) attacks and token theft. The weakness lies in Android’s file-sharing mechanism, specifically the content provider feature, which doesn’t always validate content received from other applications. This oversight allows malicious applications to manipulate filenames, potentially compromising receiving-applications when they process the files. Microsoft has alerted Google, and both have offered guidance to developers on remediation. Xiaomi’s File Manager and WPS Office were among the affected applications which have been subsequently patched. Microsoft warns of potentially more vulnerable applications in the future. CTIX analysts urge readers to update their applications and download only from trusted sources.