CVE-2013-6271
Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device...
Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.android.settings.ChooseLockGeneric class with the PASSWORD_QUALITY_UNSPECIFIED option.
Exploit likelihood
What each source reports
NVD Score used
Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.android.settings.ChooseLockGeneric class with the PASSWORD_QUALITY_UNSPECIFIED option.
- Record
CVE-2013-6271- CVSS 2.0
- 8.8 High
AV:N/AC:M/Au:N/C:C/I:C/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.android.settings.ChooseLockGeneric class with the PASSWORD_QUALITY_UNSPECIFIED option.
- Record
CVE-2013-6271- Updated
- 2026-11-02
EUVDEUVD-2013-6099 No score
Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.android.settings.ChooseLockGeneric class with the PASSWORD_QUALITY_UNSPECIFIED option.
- Record
EUVD-2013-6099- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7jx4-gmg6-rjv2 No score
Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device...
Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.android.settings.ChooseLockGeneric class with the PASSWORD_QUALITY_UNSPECIFIED option.
- Record
GHSA-7jx4-gmg6-rjv2- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Android Settings Remove Device Locks (4.0-4.3) | 2013-10-11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6271 is a high vulnerability (CVSS 8.8) in Google Android, published December 14, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.03%, the 94th percentile. No source names a fixed version.