Exported components are parts of an Android app, such as activities, services, broadcast receivers and content providers, that other apps on the device are allowed to reach. When a component is exported without proper checks, another app can trigger it or read its data.
The fix is to export only what genuinely needs to be reachable and to protect it with permissions and input checks. Reviewing the manifest shows which components are exposed and whether that is intended.
Mobexa tests the exact Android or iOS build you ship and maps every finding to the OWASP Mobile Top 10 and MASVS.
Start Free Trial