Passcode bypass on Talk-Android app

Vulnerability

The Talk Android app, versions prior to 15.0.2, contains a passcode bypass vulnerability. An attacker with physical access to the target's device can circumvent the app's passcode protection, gaining unauthorized access to the user's Nextcloud files and conversations. The vulnerability is addressed in pull request #2598 [1] and documented in the security advisory [2].

Exploitation

To exploit this vulnerability, the attacker must have physical possession of the target's Android device. No additional authentication or user interaction is required beyond the physical access. The attacker can then bypass the passcode screen and directly access the Talk app's data, including Nextcloud files and chat conversations.

Impact

Successful exploitation results in unauthorized disclosure of sensitive information. The attacker can view the user's Nextcloud files and read all conversations within the Talk app. This compromises the confidentiality of both stored files and private communications.

Mitigation

The vulnerability is fixed in Talk Android version 15.0.2. Users should upgrade to this version or later. No workarounds are available [2]. The fix was merged in pull request #2598 [1].