PT-2026-43382 · Unknown · Easyelife App Lock

Published 2026-05-26 · Updated 2026-05-27 · CVE-2025-68710

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Easyelife App lock version 1.9.2

Description An issue in the application allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an overlay instead of utilizing Android's secure authentication APIs. By navigating cascading interface flows through exposed routes via advertisement or browser intents, an attacker can evade lockscreen verification to access protected applications, such as Chrome. This can lead to privilege escalation and information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-68710

Affected Products

Easyelife App Lock

References · 5

• 🔥 https://github.com/actuator/locker.app.safe.applocker/blob/main/CVE-2025-68710 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-68710 · Security Note
• https://t.me/cveNotify/164937 · Telegram Post
• https://github.com/actuator/locker.app.safe.applocker · Note
• https://play.google.com/store/apps/details?id=locker.app.safe.applocker · Note