Android Auto Gaming Apps Offer Safe Entertainment During Vehicle Downtime
What Happened — ZDNet reviewed four third‑party games that run on Android Auto, showing they work on a car’s touchscreen while the vehicle is parked. The apps (Angry Birds Friends, Beach Buggy Racing 1 & 2, etc.) are lightweight, short‑burst titles that keep passengers occupied.
Why It Matters for TPRM — • Third‑party mobile apps can introduce privacy‑related data collection on vehicle infotainment systems.
• Entertaining apps increase the attack surface of the Android Auto ecosystem if they request unnecessary permissions.
Who Is Affected — Automotive OEMs that ship Android Auto‑enabled vehicles, mobile app developers publishing to the Play Store, and end‑users who install these games in their cars.
Recommended Actions — • Audit the permissions each game requests and verify they align with functional needs.
• Update vendor risk registers to include infotainment‑app risk assessments.
• Encourage OEMs to enforce strict app vetting in the Android Auto marketplace.
Technical Notes — The games run as standard Android packages; no known CVEs or exploits are associated with them. They rely on the Android Auto API for display and input, and all data (e.g., high‑scores) is stored locally or in the developer’s cloud service. Source: ZDNet article