Lucene search

K
osvGoogleOSV:ASB-A-169933423
HistoryJan 01, 2021 - 12:00 a.m.

The map that stores device locked status of a user in keystore is not synchronized

2021-01-0100:00:00
Google
osv.dev
7

0.0004 Low

EPSS

Percentile

5.1%

In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a possible bypass of lockscreen requirements for keyguard bound keys due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

0.0004 Low

EPSS

Percentile

5.1%

Related for OSV:ASB-A-169933423