CVE-2020-13626

MEDIUM 4.6CVE-2020-13626 · Published 09/10/2020 · updated 17/06/2026

In short

CVE-2020-13626 is a MEDIUM (CVSS 4.6) vulnerability affecting app locker (oneplus).
Chance of exploitation in the next 30 days (EPSS): 0.32%, higher than 24.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
app locker oneplus	`≤ 2020-10-06`	No fix yet

Description

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked.

References

medium.com/%40bugsbunnyy1107/the-tell-tale-of-cve-in-oneplus-phones-91e97342a8b5
support.oneplus.com/app/answers/detail/a_id/301/~/how-to-use-app-locker · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free