Description
An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data. Exposed ”com.pri.applock.LockUI“ activity allows any other malicious application, with no granted Android system permissions, to inject an arbitrary intent with system-level privileges to a protected application. One must know the protecting PIN number (it might be revealed by exploiting CVE-2024-13916) or ask the user to provide it. Only version (version name: 13, version code: 33) was tested and confirmed to have this vulnerability. Application update was released in April 2025.
INFO
Published Date :
2025-05-30T15:17:47.318Z
Last Modified :
2025-06-10T09:12:56.279Z
Source :
CERT-PL
AFFECTED PRODUCTS
The following products are affected by CVE-2024-13917 vulnerability.
No data.
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-13917.
| URL | Resource |
|---|---|
| https://cert.pl/en/posts/2025/05/CVE-2024-13915 |
|