GitHub Security Lab created an open source AI security agent to automate vulnerability detection in Android applications, discovering 24 vulnerabilities through custom taskflows that guide AI models to find complex security issues. The taskflows are available for researchers to run on their own projects and have identified high-impact flaws in popular apps like OsmAnd.
A GrapheneOS user experiencing slow performance with Osmand maps app discovered the hardened memory allocator was the culprit. The issue can be resolved by disabling the hardened memory allocator per-app in Exploit protection settings, trading some security for improved speed since Osmand doesn't load content from the internet.