An urgent Android security alert has been issued regarding a critical flaw that could potentially allow cybercriminals to bypass a phone’s lock screen, putting personal data at risk. The Donjon security team identified the vulnerability, which could lead to unauthorized access to sensitive information stored on devices. Researchers demonstrated the exploit by connecting a susceptible phone to a laptop via USB, revealing how quickly they could retrieve the device’s PIN, decrypt its storage, and access confidential files, including data from software wallets, all within a minute.
The security vulnerability, known as CVE-2026-20435, impacts specific Android devices that use MediaTek processors, commonly found in budget-friendly smartphones, making a significant number of devices susceptible to exploitation. Security experts warn that attackers can extract encryption keys before the system fully boots, effectively circumventing security measures like full-disk encryption and lock screen protection.
Malwarebytes explained that the vulnerability affects certain MediaTek SoCs using Trustonic’s TEE, which reportedly accounts for approximately one in four Android phones, particularly lower-priced models. To mitigate the risk, users are advised to check their phone’s processor information in the Settings menu and promptly install any available security updates, especially if their device runs on a MediaTek chip. MediaTek has already released a fix, but users must ensure their devices receive the necessary software updates for added protection.
It is crucial to note that this attack requires physical access to the device. By keeping devices in possession and regularly updating them, the risk of exploitation is significantly reduced. However, users with older devices that no longer receive updates should exercise caution or consider upgrading to minimize vulnerability.
