Android 16 users could face a potential security risk after Google confirmed a lock screen vulnerability that may allow authentication to be bypassed under specific conditions. The company said it is aware of the issue and is preparing a software update to address it.
Tesla Balance Bike EV maker launches $225 children’s bike
According to a report, the flaw involves a Gemini feature that works from the lock screen. Normally, if users disable Gemini’s access to apps such as WhatsApp or messaging services, the device requires a PIN before granting access.
However, researchers found that pressing the “Add Attachment” and “Continue” buttons simultaneously in a specific sequence can, in some cases, bypass the PIN verification process.
The report also claimed that an attacker could send messages and even restore Gemini’s access to WhatsApp after the user had disabled it.
Google has reportedly known about the vulnerability since May. The flaw is not limited to Pixel devices and could affect other Android smartphones. However, the company has not confirmed which brands or Android versions are vulnerable.
Cybersecurity experts classify the issue as an authentication bypass or lock screen bypass vulnerability. Although such flaws occasionally emerge in mobile operating systems, experts recommend installing official security updates as soon as they become available to minimise security risks.
