An Android vulnerability has been uncovered that allows attackers to modify apps in an undetected way, without affecting their signatures. The flaw (CVE-2017-13156) allows a file to be a valid APK ...