Medium severity4.6NVD Advisory· Published Oct 9, 2020· Updated Jun 17, 2026

CVE-2020-13626

Description

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked.

Affected products

Oneplus/App Locker2 versions
cpe:2.3:a:oneplus:app_locker:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oneplus:app_locker:*:*:*:*:*:*:*:*range: <=2020-10-06
- (no CPE)
Oneplus/OnePlus 2llm-fuzzy
Range: <=2020-10-06

Patches

Vulnerability mechanics

References

support.oneplus.com/app/answers/detail/a_id/301/~/how-to-use-app-lockernvdThird Party Advisory
medium.com/%40bugsbunnyy1107/the-tell-tale-of-cve-in-oneplus-phones-91e97342a8b5nvd

News mentions

No linked articles in our index yet.

cvss	0.299
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000