Lock-Screen Bypass Bug Quietly Patched in Handsets

🗓️ 16 Nov 2018 16:42:48Reported by Lindsey O'DonnellType

A design flaw in in-display fingerprint sensors, affecting several cellphone models, has been patched quietly. The flaw allows a trivial lock-screen bypass attack, and was tied to a bug in the technology used for user authentication

Reporter	Title	Published	Views	Family All 9
CVE	CVE-2018-7929	18 Sep 201813:00	–	cve
Cvelist	CVE-2018-7929	18 Sep 201813:00	–	cvelist
EUVD	EUVD-2018-19641	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Lock-screen Bypass Vulnerability in Huawei Mate RS Smartphones	14 Sep 201800:00	–	huawei
NVD	CVE-2018-7929	18 Sep 201813:29	–	nvd
OSV	CVE-2018-7929	18 Sep 201813:29	–	osv
Prion	Security feature bypass	18 Sep 201813:29	–	prion
Positive Technologies	PT-2018-18329	18 Sep 201800:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2018-7929: Incorrect Authorization	18 Sep 201800:00	–	rapid7

Source	Link
media	www.media.threatpost.com/wp-content/uploads/sites/103/2018/11/16110158/xiaomi-mi-8-explorer.jpg
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-7929
media	www.media.threatpost.com/wp-content/uploads/sites/103/2018/11/16111638/configuration-optical-fingerprint-sensor.jpg
media	www.media.threatpost.com/wp-content/uploads/sites/103/2018/11/16111906/configuration-capacitive-fingerprint-sensor.jpg
theverge	www.theverge.com/circuitbreaker/2018/1/9/16867536/vivo-fingerprint-reader-integrated-display-biometric-ces-2018
media	www.media.threatpost.com/wp-content/uploads/sites/103/2018/11/16084739/samsung-in-display-fingerprint-sensor-technology-optical-1.jpg
biometricupdate	www.biometricupdate.com/201810/samsung-patent-for-optical-in-display-fingerprint-sensor-published
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20180914-01-smartphone-en
media	www.media.threatpost.com/wp-content/uploads/sites/103/2018/11/16112453/synaptics_sf9500_sensor-e1542385563187.jpg

16 Nov 2018 16:42Current

6.7Medium risk

Vulners AI Score6.7

EPSS0.00245