Unity Technologies has released a security patch to fix a flaw that allowed third-party code to run within Android-based mobile games. A risk that some experts had warned could affect crypto users.
The vulnerability, discovered in June, has now been addressed through updates rolled out across Unity’s gaming engine, the company confirmed on Friday.
Larry “Major Nelson” Hryb, Unity’s Director of Community, explained in a security advisory that the bug could have allowed local code execution and access to sensitive data on devices running Unity-built apps.
He emphasized that there is currently no evidence of any exploitation and that no users or customers were affected.
Unity Urges Developers and Gamers to Apply Security Fix
Unity Technologies has advised developers to download the patched version of the Unity Editor before making their next build, rebuild any previously released games using the updated editor, and republish them so players can receive the update.
For mobile gamers, Unity recommended keeping their devices up to date, enabling automatic updates, and using reliable antivirus software.
Microsoft also issued a related security alert on Friday, noting that its Windows game development teams are updating any titles that could be impacted by the vulnerability. The company clarified that console games are not affected. Windows Defender has already been updated to offer protection, while Android anti-malware systems have also been strengthened, according to Neowin.
In response to the issue, several developers, including Obsidian Entertainment, have temporarily removed multiple games from digital storefronts to implement the fix, GameRant reported.
Unity remains one of the world’s leading platforms for creating and scaling real-time games and applications, powering over 70% of the top 1,000 mobile games globally.