Google denied update due Remediation for Implicit PendingIntent Vulnerability Google denied update due Remediation for Implicit PendingIntent Vulnerability android android

Google denied update due Remediation for Implicit PendingIntent Vulnerability


Thanks to @kkazakov problem solved. Library com.huawei.hms:push contains unsafe usage of implicit PendingIntents. Google approved update for build without this lib.

For me it's time to create gms and hms build flavors to avoid problems with Huawei in the future.


The Intent in your example is an explicit intent with a given action. So this shouldn't be the cause for your update problem.

I am facing the same security problem and I think the cause for this is in a dependency. Because there are only explicit pending intents in my app.

I don't think that google prevents an update because of a vulnerability in their own libraries so I currently looking into the dependencies of the Huawei SDKs. It's just a guess but without any more information from play store guessing is the only thing we can do.


Thank you for your feedback. This issue has been resolved in the release of Push SDK 5.3.0.304.It has been tested and verified by developers and can be approved by Google for release.

For details, you can check the Push kit Version Change History description.