An urgent Android security alert has been issued regarding a critical vulnerability that could potentially enable cybercriminals to bypass a phone’s lock screen. The security flaw, discovered by the Donjon security team, poses a significant risk as attackers could exploit it to gain access to personal data and all stored information on affected devices within a minute.

Researchers demonstrated the exploit by connecting a vulnerable Android phone to a laptop via USB, successfully retrieving the device’s PIN, decrypting its storage, and accessing sensitive files, including data from software wallets, in under 60 seconds. The vulnerability, identified as CVE-2026-20435, specifically impacts certain Android devices powered by MediaTek processors, commonly found in budget-friendly smartphones, putting a considerable number of devices at risk.

Security experts have highlighted that the flaw allows attackers to extract encryption keys before the system fully boots, effectively circumventing security measures like full-disk encryption and lock screen protection. Malwarebytes explained that approximately one in four Android phones, mostly lower-priced models, are affected by this vulnerability.

To mitigate the risk, users are advised to check their phone’s processor information by navigating to Settings > About Phone and identifying the processor or model details. If the device is using a MediaTek chip, it is crucial to promptly install any available security updates. MediaTek has already released a fix for the vulnerability, but individual device manufacturers need to distribute it through software updates. Keeping devices up to date is essential for optimal protection.

It is important to note that this attack requires physical access to the device. By ensuring that the phone remains in the user’s possession and receives regular updates, the risk of exploitation is significantly reduced. However, users with older devices that no longer receive updates should exercise caution or consider upgrading to mitigate potential vulnerabilities.