ASB-A-378514614 | Vulnetix

ASB-A-378514614 PUBLISHED

In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected Products

Vendor	Product	Versions
platform	frameworks/base	15-next, 15:0, 15

Timeline

May 1, 2025 CVE Published
Aug 7, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2025-05-01 advisory
https://android.googlesource.com/platform/frameworks/base/+/afd05dc17e027734f665ac978ad6fb4584b6fd40 patch

Open in Interactive Console →