CVE-2026-56294 | BDVDB-2026-341869 Detail
capacitor-native-biometriccapacitor-native-biometric
Description#
capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSucceeded() method fails to validate CryptoObject parameters. Attackers can hook the onAuthenticationSucceeded() function using dynamic instrumentation to bypass biometric authentication without valid credentials.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact low, availability impact none. Attack vector: physical.
Weaknesses#
- CWE-287 Improper Authentication
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.