Easyelife App Lock CVE-2025-68710
LOWSeverity by source
AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Lifecycle Timeline
4DescriptionCVE.org
Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an overlay rather than by using Android's secure authentication APIs. By navigating cascading interface flows - insecure navigation through exposed routes facilitates app control evasion {I.N.T.E.R.F.A.C.E] via advertisement or browser intents - an attacker can evade lockscreen verification and access protected apps (e.g., Chrome), resulting in information disclosure and privilege escalation.
AnalysisAI
PIN lock bypass in Easyelife App Lock 1.9.2 for Android allows a local attacker with physical device access to reach applications that were supposedly secured behind a PIN. The root cause is architectural: the lock is implemented as a UI overlay rather than through Android's native secure authentication APIs (BiometricPrompt, KeyguardManager), meaning it can be circumvented by triggering advertisement or browser intents that cause the app to navigate cascading activity flows, effectively routing around the overlay. EPSS is very low at 0.05% (16th percentile), no public exploit is confirmed in CISA KEV, and a researcher disclosure with likely proof-of-concept steps is publicly available on GitHub.
Technical ContextAI
CWE-288 (Authentication Bypass Using an Alternate Path or Channel) describes the root cause precisely: the application establishes a security boundary via an Android overlay window rendered atop other apps, rather than integrating Android's privileged authentication subsystem. Android overlays are application-layer constructs and do not gate Activity launching or intent resolution at the OS level. When the app processes certain implicit intents - such as those fired by in-app advertisements or deep links from a browser - Android's activity manager can launch or surface underlying protected apps, bypassing the overlay entirely. Secure alternatives such as KeyguardManager.createConfirmDeviceCredentialIntent() or BiometricPrompt enforce authentication at the framework level and are not susceptible to this routing attack. The CPE string provided (cpe:2.3:a:n/a:n/a:*:*:*:*:*:*:*:*) is a placeholder and reflects the app's lack of formal NVD product registration; the canonical Android package identifier is locker.app.safe.applocker.
RemediationAI
No vendor-released patch has been identified at time of analysis. The primary recommended action is to uninstall Easyelife App Lock (locker.app.safe.applocker) and cease relying on it as a security control. As a compensating control, users requiring application-level access protection should instead configure Android's built-in screen lock (PIN, pattern, or biometric) via device Settings, which enforces authentication at the OS level and is not bypassable through intent routing. For enterprise deployments requiring per-app authentication controls, evaluate Mobile Device Management (MDM) solutions or Android Work Profile configurations that leverage Android's official KeyguardManager and BiometricPrompt APIs. Researcher disclosure is available at https://github.com/actuator/locker.app.safe.applocker/blob/main/CVE-2025-68710. Note that switching to native Android screen lock will require the device to be unlocked at the OS level rather than per-app, which is a behavioral trade-off users should evaluate against their threat model.
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Unauthenticated remote OS command injection in MeiG Smart FORGE_SLT711 cellular gateway firmware MDM9607.LE.1.0-00110-ST
Unauthenticated API access in LalanaChami Pharmacy Management System (commit 5c3d028) allows remote attackers to dump al
In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write o
Giflib 5.2.2 contains a buffer overflow in the EGifGCBToExtension function that fails to validate allocated memory when
Denial of service in GPAC's MP4Box multimedia tool (versions before 26.02.0) arises from a use-after-free in the gf_sei_
Arbitrary kernel memory read/write in Realtek rtl819x Jungle SDK Wi-Fi driver allows local unprivileged attackers to acc
Denial of service in GPAC's MP4Box/libgpac media importer (versions before 26.02.0) lets an attacker crash the tool by s
An issue in the parse_month function (/time/strptime.rs) of relibc commit ab6a2e allows attackers to cause a Denial of S
Denial of service in relibc (the Redox OS C standard library) at commit 61f42d allows attackers to crash a process by ge
An issue in the pthread_rwlockattr_setpshared() function of relibc commit 61f42d allows attackers to cause a Denial of S
Denial of service in relibc (the Redox OS C standard library implementation, commit 61f42d) lets attackers crash a proce
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today