Authorization

2020-10-0906:15:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.2%

JSON

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked.

CPENameOperatorVersion
app_lockereq<= 2020106

CPE	Name	Operator	Version
	app_locker	eq	<= 2020106

References

medium.com/%40bugsbunnyy1107/the-tell-tale-of-cve-in-oneplus-phones-91e97342a8b5

support.oneplus.com/app/answers/detail/a_id/301/~/how-to-use-app-locker