PrivSec-dev / banking-apps-compat-report

Report and track banking app compatibility with GrapheneOS, including which workarounds may be required.
https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/
83 stars 4 forks source link

Mercado Pago #503

Closed Hmmmmm0009 closed 4 days ago

Hmmmmm0009 commented 6 days ago

Is there an existing issue for this?

App name

Mercado Pago: cuenta digital

Link to app

https://play.google.com/store/apps/details?id=com.mercadopago.wallet

App version

2.348.1

Country of the app

Mexico

Build Number

2024091900

Device list

Pixel 6

Profile app tested in

Owner profile

Google Play installed?

Installed

Where did you install this app from?

Google Play Store

Google Play services Network permission revoked?

Native code debugging

Exploit protection compatibility mode

Memory tagging extension (MTE)

Dynamic code loading via memory

Dynamic code loading via storage

Stock OS compatibility

NFC payments

Description of the app's functionality

App works as expected, can send, recieve money and make NFC payments (they are a bit buggy though).

Are there any extra notes you think users should know about?

App requires DCL via memory to work and DCL via storage to make NFC payments but it doesn’t crash without it, it’s possible to use it like that if you don’t need NFC payments.

App tested in Mexico

ADB logcat of the app if necessary

No response

spring-onion commented 4 days ago

Thank you. I think this one fits more into the mexico category than anything else.

Hmmmmm0009 commented 3 days ago

The Mercado Pago app is available in other countries like Argentina but yes I agree, my test was done in Mexico after all, don’t know if there are different versions of the app though.