An urgent security alert has been issued for Android users regarding a critical vulnerability that could potentially enable cyber attackers to bypass the lock screen of certain devices within a minute. The security flaw, identified by the Donjon security team, poses a significant risk as it allows unauthorized access to personal data and all stored information on affected smartphones.
Researchers demonstrated the exploit by connecting a vulnerable Android phone to a laptop via USB, revealing how they could retrieve the device’s PIN, decrypt its storage, and access sensitive files, including data from software wallets, in under 60 seconds.
The vulnerability, known as CVE-2026-20435, specifically impacts Android devices powered by MediaTek processors, which are commonly found in budget-friendly smartphones, putting a considerable number of devices at potential risk.
Security experts have highlighted that the flaw permits attackers to extract encryption keys before the system fully boots, effectively bypassing security measures such as full-disk encryption and lock screen protections.
To mitigate the risk posed by this vulnerability, users are advised to check their device’s processor information in the settings menu and ensure that any available security updates are promptly installed, particularly if their phone is equipped with a MediaTek chip.
Although MediaTek has released a fix for the issue, it is essential for individual device manufacturers to distribute the update through software patches. Keeping devices up to date with the latest security measures is crucial for safeguarding against potential breaches.
It is important to note that this security threat requires physical access to the device, meaning that as long as users maintain possession of their phones and regularly update them, the risk of exploitation is significantly reduced. However, users with older devices that no longer receive updates should exercise caution or consider upgrading to more secure options.