CVE-2016-3917 PUBLISHED

The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication process, which allows physically proximate attackers to authenticate as an arbitrary user by leveraging lockscreen access, aka internal bug 30744668.

EPSS 0.02% · 5.4th percentile

Risk Scores

EPSS Score
0.02%
5.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSandroid0, 20150818-1500-0ubuntu2, 20150818-1500-0ubuntu3

Timeline

References

Open in Interactive Console →