This vulnerability arises from a logic error in the KeyguardViewMediator.java component of Android, enabling an attacker with local access and limited privileges to bypass lockdown mode under screen pinning. The flaw allows disclosure of information locally without needing user interaction. It affects Android versions 14, 15, 16, and 16-qpr2. The CVSS 3.1 base score is 3.3, reflecting low impact primarily on confidentiality. No vendor advisory or patch links are currently available, and the remediation level is unspecified.

The impact is limited to local information disclosure without integrity or availability effects. Exploitation does not require user interaction or elevated privileges beyond local access. There are no known active exploits in the wild. The vulnerability does not allow remote code execution or privilege escalation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should be aware of the risk of local information disclosure when using lockdown mode with screen pinning. No specific mitigations are provided by the vendor at this time.