CVE-2025-68711
LowCVSS 2.4Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
AppLockZ App Lock and Fingerprint Lock version 4.2.11 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an overlay rather than using Android's secure authentication APIs. By navigating cascading interfaces and exploiting exposed routes, an attacker can bypass lockscreen verification and access protected apps (e.g., Chrome), leading to information disclosure and privilege escalation.
Risk Assessment
An attacker with physical access to the device can access protected apps and data, compromising privacy and security.
Recommendation
Uninstall AppLockZ and replace it with a solution that uses Android's secure lock mechanisms.
Original NVD description (English source)
AppLockZ App Lock and Fingerprint Lock (applock.passwordfingerprint.applockz) 4.2.11 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an overlay rather than by using Android's secure authentication APIs. By navigating cascading interface flows - insecure navigation through exposed routes facilitates app control evasion {I.N.T.E.R.F.A.C.E] via advertisement or browser intents, an attacker can evade lockscreen verification and access protected apps (e.g., Chrome). This results in information disclosure and privilege escalation.