ASB-A-222446076 — Vulnetix

ASB-A-222446076 PUBLISHED

In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lock screen during device setup due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Products

Vendor	Product	Versions
platform	frameworks/base	14-next:0, 11:0, 11

Timeline

Jan 1, 2024 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2024-01-01 advisory
https://android.googlesource.com/platform/frameworks/base/+/a33159e8cb297b9eee6fa5c63c0e343d05fad622 patch
https://android.googlesource.com/platform/frameworks/base/+/d42f8d774901e8bcdf2c83b61b01fad79ce2f69f patch

Open in Interactive Console →