What’s Vulnerable › Vulnerabilities

CVE-2020-13626

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-10-09 · updated 2026-06-17
• Weakness: CWE-862

Description

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked.

Affected products

• OnePlus App Locker: through 2020-10-06

References

• https://medium.com/%40bugsbunnyy1107/the-tell-tale-of-cve-in-oneplus-phones-91e97342a8b5
• https://support.oneplus.com/app/answers/detail/a_id/301/~/how-to-use-app-locker
• https://medium.com/%40bugsbunnyy1107/the-tell-tale-of-cve-in-oneplus-phones-91e97342a8b5
• https://support.oneplus.com/app/answers/detail/a_id/301/~/how-to-use-app-locker

Get alerted when CVE-2020-13626 or the next vulnerability affects your stack