DonationCoder.com forum
 
Read-only archive. This is a static copy of the DonationCoder.com forum. Reading and searching work as before; logging in, posting and private messages do not.
Archive of 2026-10-21 · About this archive · Main site

Author Topic: Security: Android 5.x Lockscreen Bypass (CVE-2015-3860)  (Read 3,243 times)

ewemoa

  • Honorary Member
  • Joined in 2008
  • **
  • Posts: 2,922
    • Plugin Coding Medal
    • Participated in NANY Challenge Three Times
Security: Android 5.x Lockscreen Bypass (CVE-2015-3860)
« on: September 17, 2015, 12:22 AM »
Quote
A vulnerability exists in Android 5.x <= 5.1.1 (before build LMY48M) that allows an attacker to crash the lockscreen and gain full access to a locked device, even if encryption is enabled on the device. By manipulating a sufficiently large string in the password field when the camera app is active an attacker is able to destabilize the lockscreen, causing it to crash to the home screen. At this point arbitrary applications can be run or adb developer access can be enabled to gain full access to the device and expose any data contained therein.

via http://sites.utexas.edu/iso/2015/09/15/android-5-lockscreen-bypass/

Original address: https://www.donationcoder.com/forum/index.php?topic=41612.0