Huawei AppGallery Bug Allows Paid Apps To Be Grabbed For Free

A rather odd flaw has been spotted in Huawei’s app store. The Huawei AppGallery has a bug that allows users to download paid Android apps for free.

Huawei AppGallery bug makes it possible to download paid apps for free

This bug has been discovered by 9to5Google. It seems like the underlying API of Huawei’s AppGallery does not offer protection for paid applications. It seems like it’s possible to download paid apps without needing to pay for them, or logging into an account.

Based on the information provided by the source, this exploit makes it possible to “obtain a valid APK download link for premium apps”. Of course, this could be used to pirate apps.

The source notes that Huawei has been made aware of this bug. The company acknowledged the problem, but did not say when will it be fixed. We’re guessing that will happen really soon, though.

In case you’re a developer, it may be a good idea to protect your apps. It is noted that developers should ensure their apps are protected, through DRM, such as the AppGallery’s DRM Service.

Huawei’s app store has been doing really well, actually

Huawei’s AppGallery has actually been doing really well. The company invested a lot into it, ever since the US ban went into effect. A lot of apps are now available through it, though, of course, nowhere near the Google Play Store.

Still, you may be surprised by the sheer amount of good apps in the AppGallery these days. Huawei also makes it possible to install apps from APK repositories, in case you can’t find what you’re looking for in the AppGallery.

Another thing worth noting is that AppGallery is not limited to Huawei smartphones. You cannot download it via the Google Play Store, but you can sideload it to your smartphone. Why would you want to do that? Well, to grab some of Huawei’s very own apps, if you need them.

If you’re using the company’s smartwatch or earphones, you’ll need the Health and AI Life applications. The newest versions of those apps are available via the AppGallery. That’s just one example, of course.