CVE-2022-1955
Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This...
Original description
The description as published by the source.
Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation.
References
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com