CVE-2014-6713: The MedQuiz: Medical Chat and MCQs (aka com.pdevsmedd.med) application 1.5 for Android does not verify X.50...

Security readout for executives and security teams

MedQuiz: Medical Chat and MCQs for Android version 1.5 may trust fake SSL certificates. A person controlling or intercepting a user’s network could impersonate the service and capture sensitive data sent through the app. The public record does not name a patch or active exploitation. Exposure appears limited to Android devices with MedQuiz: Medical Chat and MCQs version 1.5 installed and used over networks an attacker can intercept, such as untrusted Wi-Fi. Enterprise exposure depends on app inventory and whether users entered sensitive information through the app. Treat this as a targeted mobile-app risk, not a broad infrastructure emergency. Prioritize inventory and removal or upgrade where the app is present, especially in healthcare or training environments where users may share sensitive medical information. Mitigation focus: Inventory managed Android devices for com.pdevsmedd.med version 1.5.; Check vendor or app-store guidance for a fixed maintained release.; Remove or block the app if no trusted fixed version is available..

Prepared

Jun 14, 2026, 06:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.