VULNERABILITY INTELLIGENCE
CVE-2013-6271
CVSS score8.8 HIGH
EPSS probability8.03%
CISA KEVNot currently listed
Published2013-12-14
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:N
Description
Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.android.settings.ChooseLockGeneric class with the PASSWORD_QUALITY_UNSPECIFIED option.