An urgent security alert has been issued for Android users, warning them about a critical vulnerability that could compromise their device’s security. The flaw, discovered by the Donjon security team, enables cybercriminals to bypass the lock screen of certain Android phones powered by MediaTek processors. This vulnerability, identified as CVE-2026-20435, poses a significant risk as it allows attackers to extract encryption keys before the device fully boots up, thereby circumventing security measures like full-disk encryption and lock screen protection.
In a demonstration by researchers, it was shown that by connecting a vulnerable phone to a laptop via USB, they could quickly retrieve the device’s PIN, decrypt its storage, and access sensitive information within a minute. The affected MediaTek System-on-a-Chip (SoC) models, using Trustonic’s Trusted Execution Environment (TEE), are reportedly present in about one in four Android phones, particularly in budget-friendly devices.
To mitigate the risk posed by this vulnerability, users are advised to check their phone’s processor information in the Settings menu and ensure that security updates are promptly installed, especially if their device uses a MediaTek chip. MediaTek has already released a fix for the issue, but users need to receive the update from their device manufacturers. Keeping devices up to date with the latest software patches is crucial for safeguarding against potential attacks.
It is important to note that this exploit requires physical access to the device, reducing the risk for users who keep their phones secure and updated. However, older devices that no longer receive software updates may remain vulnerable, prompting users with such devices to exercise caution or consider upgrading to newer models for enhanced security.