CVE-2013-6271

Published: Dec 14, 2013Modified: Apr 29, 2026

8.8

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:N

Exploitability: 8.6 / Impact: 9.2

Source: NVD

Description

Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.android.settings.ChooseLockGeneric class with the PASSWORD_QUALITY_UNSPECIFIED option.

Affected (11)

Products: Google: Android

Google

1 product

Android

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Google Android	Version 4.0.1
Google Android	Version 4.0.2
Google Android	Version 4.0.3
Google Android	Version 4.0.4
Google Android	Version 4.0
Google Android	Version 4.1.2
Google Android	Version 4.1
Google Android	Version 4.2.1
Google Android	Version 4.2.2
Google Android	Version 4.2
Google Android	Version 4.3