https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T00:48:22.769706+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-254070 EUVD-2026-254070 2026-10-08T00:48:22.815230+00:00 EUVD-2026-254070 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13916 fkie_cve-2024-13916 2026-10-08T00:48:22.815312+00:00

An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data. Exposed ”com.android.providers.settings.fingerprint.PriFpShareProvider“ content provider's public method query() allows any other malicious application, without any granted Android system permissions, to exfiltrate the PIN code.

Only version (version name: 13, version code: 33) was tested and confirmed to have this vulnerability. Application update was released in April 2025.

 https://cve.radiocsirt.org/vuln/ghsa-pw53-33fx-vf55 GHSA-pw53-33fx-vf55 2026-10-08T00:48:22.815356+00:00

An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data. Exposed ”com.android.providers.settings.fingerprint.PriFpShareProvider“ content provider's public method query() allows any other malicious application, without any granted Android system permissions, to exfiltrate the PIN code.

Vendor did not provide information about vulnerable versions. Only version (version name: 13, version code: 33) was tested and confirmed to have this vulnerability