CVE-2013-6271 | BDVDB-2026-58917 Detail

Description#

Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.android.settings.ChooseLockGeneric class with the PASSWORD_QUALITY_UNSPECIFIED option.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id/1029410
https://cureblog.de/2013/11/cve-2013-6271-remove-device-locks-from-android-phone/
http://seclists.org/fulldisclosure/2013/Nov/204
http://www.theregister.co.uk/2013/12/10/android_has_lockbypass_bug/

Exploit#

No public exploit known

History#

Version 12013-12-14Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.