Artifact of ApkFuzz: Search-Based Fuzzing for Android APK Vulnerability Discovery

Artifact of ApkFuzz: Search-Based Fuzzing for Android APK Vulnerability Discovery Abstract. While most work focuses on executable code, AndroidManifest.xml, which is the primary entry point for application metadata and permission logic, is often overlooked, making it a high-trust, low-scrutiny attack surface. We present ApkFuzz, an AFL-based fuzzer with bit-level mutations targeting the encoded region of AndroidManifest.xml in the APK file. We have identified 9 issues that cause crashes and enable denial-of-service (DoS) attacks in core tools, including Google’s apksigner and the widely used research tool DroidBot. GitHub: https://github.com/karineek/ApkFuzz Files Dataset / Artifact Description This repository contains the artifacts used in the evaluation of our tool. --- 📄 Bug Reports (PDF) The PDF files document issues and crashes discovered during fuzzing and analysis. The reports are anonymised for review. We will de-anonymise them upon acceptance. ### Developer reports- `BugReport-apksigner2Developers.pdf`- `BugReport-DroidBot2Developers.pdf` ### Crash and failure analysis- The rest of the PDF files are internal reports. We will report them once getting the developers' response on the two above. Each report includes reproduction context, observed behavior, and (where available) stack traces. --- 📦 APK Samples (ZIP files) These archives contain Android APKs used as fuzzing inputs or crash-inducing test cases. Seed for fuzzing:- `seeds-10March2026.zip` Investigated or crash-triggering APKs- `flashlight_1774742581_869270785.zip`- `happymod_1774609058_716007651.zip`- `com-gcstar-viewer-12_1774683741_983276544.zip`- `com-gcstar-viewer-12_1774757408_498240471.zip`- `com-gcstar-viewer-12_1774792092_704645414.zip`- `ademar-textlauncher-10_1774610860_382177704.zip`- `apk-24Mar2026.zip`- `investigationOfOddSeeds.zip`- `bugs-driodbot-androguard+hangs.zip` is a collection of seeds containing hangs and two bugs in androguard and DroidBot: zlib.error: Error -3 while decompressing data: invalid distance too far backzipfile.BadZipFile: Bad CRC-32 for file 'AndroidManifest.xml' Each archive contains a fuzzed APK. - We added a logger of the fuzzing errors, for example: apk-fuzzing-1.log. --- 🛠 Tool Implementation - `ApkVulFuzz-main.zip` Implementation of the fuzzing framework used for: - APK mutation - coverage-guided fuzzing - crash detection and logging --- 📌 Notes - APKs are provided only for the reproducibility of reported issues.- Some APKs are intentionally malformed to stress test parsers and runtime components.- Bug reports map directly to observed failures during automated fuzzing runs.