Lock-Screen Bypass Bug Quietly Patched in Handsets

guest · Nov 16, 2018

Lock-Screen Bypass Bug Quietly Patched in Handsets
The flaw in a high-end phones and up-and-coming handsets made by top OEMs allows hackers to bypass handset lock screens in seconds
November 16, 2018
https://threatpost.com/lock-screen-bypass-bug-quietly-patched-in-handsets/139141/

A design flaw affecting all in-display fingerprint sensors that left over a half-dozen cellphone models vulnerable to a trivial lock-screen bypass attack have been quietly patched. The flaw was tied to a bug in the popular in-display fingerprint reader technology used for user authentication.

“During our research on this, we found all the in-display fingerprint sensor module suffer the same problem no matter where it was manufactured by whatever vendors,” said Yang Yu, a researcher at Xuanwu Lab. “This vulnerability is a design fault of in-display fingerprint sensors.”

The vulnerability, which Huawei issued a patch (CVE-2018-7929) for in September, can be exploited in a matter of seconds, researchers said. In an exclusive interview with Threatpost on the flaw Yu said all an attacker needs to carry out the attack is an opaque reflective material such as aluminum foil
Click to expand...

Impacted are all phones tested in the first half of 2018 that had in-display fingerprint sensors, said Yu.

That includes current models of Huawei Technologies’ Porsche Design Mate RS and Mate 20 Pro model phones. Yu said that many more cellphone manufacturers are impacted by the issue.
Other phones that use the feature include Vivo Communication Technology’s V11 Pro, X21 and Nex ; and OnePlus’ 6T and Xiaomi Mi 8 Explorer Edition phones. Vivo, OnePlus and Xiaomi did not respond to requests for comment from Threatpost.
Click to expand...

Log in or Sign up

Lock-Screen Bypass Bug Quietly Patched in Handsets

guest Guest

Log in or Sign up

Lock-Screen Bypass Bug Quietly Patched in Handsets

guest Guest

Useful Searches