CVE-2025-68710
LowCVSS 2.4Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Easyelife App lock (Fingerprint,Applock) version 1.9.2 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an overlay rather than using Android's secure APIs. The attacker can evade the lockscreen and access protected apps like Chrome.
Risk Assessment
The risk involves bypassing the screen lock and gaining access to protected apps and data, leading to information disclosure and privilege escalation.
Recommendation
Immediately uninstall Easyelife App lock and replace it with a more secure screen lock solution.
Original NVD description (English source)
Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an overlay rather than by using Android's secure authentication APIs. By navigating cascading interface flows - insecure navigation through exposed routes facilitates app control evasion {I.N.T.E.R.F.A.C.E] via advertisement or browser intents - an attacker can evade lockscreen verification and access protected apps (e.g., Chrome), resulting in information disclosure and privilege escalation.