CVE-2024-53835: Android Pixel Family Biometric Bypass Vulnerability
Summary
CVE-2024-53835: there is a possible biometric bypass due to an unusual root cause. Affects :unknown: versions >= Pixel-family specific:0, < Pixel-family specific:2024-12-05. Fixed in Pixel-family specific:2024-12-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android operating system is a widely used mobile platform that supports a variety of devices, including the Pixel family. These devices utilize biometric authentication methods, such as fingerprint and facial recognition, to enhance security and user convenience. However, vulnerabilities in the biometric systems can lead to significant security risks, allowing unauthorized access to sensitive information and functions.
Vulnerability Detail
This vulnerability arises from an unusual root cause that allows for a possible biometric bypass. It can lead to local escalation of privilege without requiring additional execution privileges. Notably, user interaction is not needed for exploitation, making it particularly dangerous. The vulnerability specifically affects the Pixel family of devices and has been classified with a high severity level, indicating a serious risk to users.
How To Fix
Minimum fixed version
Pixel-family specific:2024-12-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. Users are advised to apply the patch as soon as it becomes available.
Conclusion
CVE-2024-53835 represents a serious vulnerability in the Android Pixel family that allows for a biometric bypass, posing a risk of unauthorized access. Users are strongly advised to update their devices to the patched version released on December 5, 2024, to protect against potential exploitation.
See every vulnerability recorded for :unknown: →
FAQ
CVE-2024-53835 is a vulnerability in the Android operating system that allows for a biometric bypass, potentially leading to unauthorized access.
The vulnerability specifically affects devices in the Pixel family of Android smartphones.
No, user interaction is not needed for exploitation, making it a significant security concern.
You can use Vulert's playground at Vulert Scanner to check if your application is affected without requiring any signup.
While there are no specific workarounds, it is crucial to apply the patch as soon as possible to mitigate the risk associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for :unknown:.
