CVE-2014-6745: The Family Location (aka com.sosocome.family) application 3.4 2014-5-20 for Android does not verify X.509 c...

Security readout for executives and security teams

CVE-2014-6745 affects the Android Family Location app, also known as com.sosocome.family, version 3.4 2014-5-20. The app reportedly failed to verify SSL server certificates, allowing a nearby or otherwise network-positioned attacker to impersonate servers and expose sensitive information. Exposure appears limited to Android devices with the named Family Location app version installed. Risk is most relevant on unmanaged or BYOD devices, or where users connect through untrusted Wi-Fi or hostile networks. Treat this as a targeted mobile-app exposure, not a broad enterprise platform emergency. Prioritize inventory and removal or replacement if the app exists on corporate or BYOD devices handling sensitive location or personal data. Mitigation focus: Inventory Android devices for com.sosocome.family and the cited version.; Remove the affected app where business use is not required.; Check vendor or app-store guidance for fixed versions or retirement status..

Prepared

Jun 14, 2026, 06:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.