CVE-2014-7694: The Corvette Museum (aka com.app_corvettemuseum.layout) application 1.399 for Android does not verify X.509...

Security readout for executives and security teams

This issue affects The Corvette Museum Android app 1.399. The app did not properly verify HTTPS certificates, so someone positioned to intercept network traffic could impersonate a server and potentially capture sensitive information sent by the app. Exposure is limited to devices running the named Android application version. Risk is highest on untrusted or interceptable networks. The source bundle does not provide deployment prevalence, supported versions, or enterprise adoption data. Treat as a targeted mobile-app exposure, not a broad infrastructure emergency. Prioritize action if employees or managed devices used the affected app, especially where sensitive data may have traversed public networks. Mitigation focus: Inventory Android devices for com.app_corvettemuseum.layout version 1.399.; Check vendor or app-store guidance for an updated or corrected release.; Remove the app where no supported fixed version is available..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.