CVE-2025-68710 affects Easyelife App lock (also known as Fingerprint, Applock, or locker.app.safe.applocker) version 1.9.2 on Android. The app lock mechanism relies on an overlay rather than Android's secure authentication APIs, which allows a local attacker with physical access to bypass the PIN lock. The attacker exploits insecure navigation through exposed routes triggered by advertisement or browser intents, enabling evasion of lockscreen verification and unauthorized access to protected applications. This results in potential information disclosure and privilege escalation. No patch or official remediation has been documented yet.

An attacker with physical access to the device can bypass the app lock PIN, gaining unauthorized access to protected applications such as Chrome. This can lead to information disclosure and privilege escalation on the affected device. There is no evidence of known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider avoiding use of this app lock version or supplementing device security with other trusted locking mechanisms. No vendor advisory or official fix information is currently provided.