Mozilla

Mozilla Foundation Security Advisory 2015-152

Lockscreen passcode bypass due to race condition

Announced
December 30, 2015
Reporter
Shally Li
Impact
High
Products
Firefox OS
Fixed in
  • Firefox OS 2.5

Description

Shally Li was first to report a race condition in the lockscreen of Firefox OS that can be used to bypass the passcode lock of a Firefox OS device. Under certain circumstances on a locked device, the user will be dropped directly to the homescreen instead of being presented with the passcode input dialog.

References