CVE-2025-48577: Android Framework KeyguardViewMediator Lock Screen Bypass Vulnerability
Summary
CVE-2025-48577: In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. Affects platform/frameworks/base across 4 version ranges.
>= 14:0, < 14:2026-03-01
>= 15:0, < 15:2026-03-01
>= 16:0, < 16:2026-03-01
>= 16-qpr2-next:0, < 16-qpr2-next:2026-03-01
Fixed in 16-qpr2-next:2026-03-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android Framework is a set of libraries and tools that enable developers to create applications for the Android operating system. One of its key components is the KeyguardViewMediator, which manages the lock screen and user authentication processes. This component is crucial for ensuring that unauthorized users cannot access the device. However, a vulnerability has been identified that allows for a potential bypass of the lock screen, raising significant security concerns.
Vulnerability Detail
The vulnerability arises from a race condition in multiple functions of the KeyguardViewMediator.java file. This flaw allows an attacker to exploit the timing of operations to bypass the lock screen without requiring any user interaction or additional execution privileges. The implications of this vulnerability are severe, as it could lead to unauthorized access to sensitive information and local escalation of privileges.
How To Fix
Minimum fixed version
16-qpr2-next:2026-03-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable biometric authentication or lock screen features until the patch is applied. This can be done by navigating to Settings > Security > Screen lock and selecting 'None' or 'Swipe'. However, this is not a recommended long-term solution.
Conclusion
The CVE-2025-48577 vulnerability poses a significant risk to Android devices by allowing potential bypass of the lock screen. Users are strongly advised to update their systems to the patched version to mitigate this risk. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for platform/frameworks/base →
FAQ
CVE-2025-48577 is a vulnerability in the Android Framework's KeyguardViewMediator that allows for a potential lock screen bypass due to a race condition.
This vulnerability can allow unauthorized users to bypass the lock screen, potentially gaining access to sensitive information stored on the device.
No, user interaction is not needed for exploitation, making it particularly dangerous.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Check your application using the Vulert playground at Vulert Scanner without any signup.
As a temporary measure, consider disabling biometric authentication or lock screen features until the patch is applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
