CBC with PKCS5/PKCS7 padding vulnerability

We have received vague reports that there is a
“CBC with PKCS5/PKCS7 padding vulnerability”
in some Flutter packages.

As far as we can tell, this is triggered by the HLS
implementation in ExoPlayer
(the com.google.android.exoplayer2.source.hls.Aes128DataSource class).
HLS is Apple’s streaming format,
which defines the type of encryption that must be used for DRM;
this isn’t a vulnerability,
as DRM doesn’t protect the user’s machine or data
but instead merely provides obfuscation 
to limit the user’s ability to fully use their software and hardware.

Apps can read and write to external storage

App can read/write to External Storage. Any App can read data written to External Storage.