Android App Cache Security I have found that when an app is in use and correct information is provided to it from a user, the information doesn't allow a successful login. However, by clearing app cache, the login is successful without restart. 

Hence, it looks like it's possible for the data to get into cache, and hence affect the working of application. 

My initial thought is that this could be a possible attack vector.

I have searched on google and this site, but could not find much information on Security of App Caches on the Android OS.

I have found the following thus far:
https://www.owasp.org/index.php/OWASP_Mobile_Security_Project_-_Android

Questions:


How does the App Cache of Apps work on android?
What security features (if any) are present on Android, that would mitigate data from getting into the app cache from either local or remote sources? How do the security features work?
The "cache" of an app is just a directory inside that app's data directory in /data/data, so there are no special security implications compared with the app's general data. The cache directory has the same permissions as the data directory enclosing it: no other apps can access it, and the user can't access it directly (via adb or a PC), unless the phone is rooted (or the app itself exposes access).

From an OS point of view, the only difference between an app's "data" and its "cache" is that there's an extra button to clear the cache, with the expectation that no user data will be lost that way. They're both treated the same way by the OS, and it's entirely up to the app what data to store in each.