CVE-2013-6271
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 8.9%
from disclosure to weapon0 days
Published on NVDDec 14
metasploitOct 11
exploitation probability
8.9%top 5% of all CVEs
observed exploitation
nono source reports it
Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.android.settings.ChooseLockGeneric class with the PASSWORD_QUALITY_UNSPECIFIED option.
Affected products
n/a · n/a