A major exploit in Google Pixel smartphones has just been revealed, allowing an attacker to unlock and access your smartphone by switching out the SIM card.

The issue has been discovered by David Schütz (CVE-2022-20465) who says an “attacker with physical access [can] bypass the lock screen protections (fingerprint, PIN, etc.) and gain complete access to the user’s device.” The issue has been fixed in the November security patch for Pixel devices. Read below to find out how the exploit works.

We can see a locked smartphone with biometrics deactivated after numerous unsuccessful attempts in the demonstration video above. After changing the SIM, you will be prompted to “Enter SIM PIN.” After three incorrect PIN attempts, users are prompted to enter the PUK code, which you should know because it’s your SIM card.

When you enter a new PIN number for that SIM card after successfully entering the previous one, the phone will unlock to your home screen and give you full access.

Schütz explains that since the attacker could just bring his/her own PIN-locked SIM card, nothing other than physical access was required for exploitation. The attacker could just swap the SIM in the victim’s device, and perform the exploit with a SIM card that had a PIN lock and for which the attacker knew the correct PUK code.

Google did not address the Pixel lockscreen issue until September after Schütz reported the unlock bug to Android’s Vulnerability Rewards Program in the middle of this year (after some in-person prompting). A $70,000 reward was given for solving it, and it is classified as a “System” issue with “High” severity in the November security patch. The fix has been rolled out to Android 10, 11, 12, 12L, and 13 AOSP versions. The November security patch is currently available for the Pixel 4a and newer. So if you have a Pixel device with this patch available, we advise you to update ASAP.

RELATED:

• Apple iPhone 14 series suffers from a SIM bug, but a fix is on its way
• Google One VPN service now available for Mac and Windows users
• Google Pixel 8 and 8 Pro are codenamed Shiba and Husky; powered by Tensor G3 SoC

(Via: 9to5Google)

The post Major Pixel Bug Allows Anyone To Unlock Your Phone Using Sim Card, Update Immediately appeared first on Gizmochina.

Last month, we reported on numerous Google Pixel 6 users facing issues with their smartphone’s WiFi. The search giant officially confirmed the issue later that month and stated that they are working on a fix that will arrive with the march update.

Now, the update has been made available to Pixel 6 and Pixel 6 Pro users which brings along the March feature drop, Android 12L, the March security patch, and many bug fixes. In a tweet, Mishaal Rahman had listed all the features that were coming to the Pixel 6 devices with the March feature drop, and now, the update is finally rolling out to users after being delayed for two weeks.

pic.twitter.com/qgHecMxdGR

— Mishaal Rahman (@MishaalRahman) March 7, 2022

The changelog for the March update is quite long, but it notably mentions fixing the notorious WiFi bug on the Pixel 6 devices.

For those unaware, Pixel 6 users have been facing troubles with Wi-Fi, like not being able to turn it on, in the first half of this month. The issue began appearing after people updated their devices to the second February update that was released previously. And now, the brand has stated that they are working on a fix, and users can see a software update rolling out sometime in March 2022.

Additionally, the phones are also gaining support for Verizon’s 5G C-Band network, which gives the devices access to the full power of the 5G Ultra-Wideband (UEB). However, this is a feature that’s specific for US users only.

RELATED:

• Google Pixel Notepad foldable smartphone production kicks off in Q3 2022: Report
• Android 12L reportedly fixes Widevine issues on Pixel devices
• Google Pixel 7 series flagship smartphones could launch sooner than the usual timeframe

The post Google Pixel 6 devices finally receive the March feature drop, Android 12L & WiFi bug fix appeared first on Gizmochina.