3 ms·

Because that's how `jarsigner` (the Java application) signs. The code signature was fixed in Android 7.0.

• 0xtk 9y ago
  Does it mean the vuln only affects devices running < 7.0?
  • klyubin 9y ago
    The vuln affects all APKs on 5.0 <= Android < 7.0, and APKs not signed with APK Signature Scheme v2 on Android 7.0 and newer.