Android Security Bypass Data Deletion

The vulnerability of the interceptKeyBeforeDispatching function in the Android operating system’s policy/src/com/android/internal/policy/impl/PhoneWindowManager.java file is related to deficiencies in access control. Exploiting this vulnerability could allow a local attacker to bypass security...

Design/Logic Flaw

The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.0 before 2016-02-01 does not properly check for setup completion, which allows physically proximate attackers to bypass the...

PT-2016-1504

Name of the Vulnerable Software and Affected Versions Android versions 5.1.x through 5.1.0 Android versions 6.0 through 2016-02-01 Description The issue is related to the interceptKeyBeforeDispatching function in the Android operating system, which does not properly check for setup completion. Th...