CVE-2013-6271: High severity Google Android vulnerability

Published Dec 14, 2013

Updated

Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.android.settings.ChooseLockGeneric class with the PASSWORDQUALITYUNSPECIFIED option.

Affected Software

11 affected components

Google Android=4.0

Google Android=4.0.1

Google Android=4.0.2

Google Android=4.0.3

Google Android=4.0.4

Google Android=4.1

Google Android=4.1.2

Google Android=4.2

Google Android=4.2.1

Google Android=4.2.2

Google Android=4.3

Event History

Dec 14, 2013

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Data Sourced

via NVD·08:55 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-6271?

CVE-2013-6271 is considered a high-severity vulnerability due to its ability to allow attackers to bypass device lock security features.

How do I fix CVE-2013-6271?

To mitigate CVE-2013-6271, users should update their Android devices to versions later than 4.3 that include patches for this vulnerability.

What versions of Android are affected by CVE-2013-6271?

CVE-2013-6271 affects Android versions 4.0 through 4.3.

What potential impact does CVE-2013-6271 have on users?

The impact of CVE-2013-6271 includes unauthorized access to device data by bypassing the lock screen.

Is it safe to use Android versions impacted by CVE-2013-6271?

It is not safe to use Android versions affected by CVE-2013-6271, and it is strongly recommended to upgrade to a patched version.