PatchTheCVE: bharat interface for money \(bhim\)https://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-9821: The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings https://patchthecve.com/cve/CVE-2017-9821.htmlhttps://patchthecve.com/cve/CVE-2017-9821.htmlWed, 17 Jun 2026 01:28:59 +0000CRITICAL 9.8: The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings (AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM) for SMS validation, which makes it easier for attackers to bypass authentication.CVE-2017-9820: The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which thehttps://patchthecve.com/cve/CVE-2017-9820.htmlhttps://patchthecve.com/cve/CVE-2017-9820.htmlWed, 17 Jun 2026 01:28:59 +0000CRITICAL 9.8: The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to the Accessibility service, which makes it easier for attackers to bypass authentication.CVE-2017-9819: The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of https://patchthecve.com/cve/CVE-2017-9819.htmlhttps://patchthecve.com/cve/CVE-2017-9819.htmlWed, 17 Jun 2026 01:28:59 +0000CRITICAL 9.8: The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP feature, which makes it easier for attackers to bypass authentication.CVE-2017-9818: The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, whttps://patchthecve.com/cve/CVE-2017-9818.htmlhttps://patchthecve.com/cve/CVE-2017-9818.htmlWed, 17 Jun 2026 01:28:59 +0000HIGH 7.5: The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access.