An urgent security alert has been issued for Android users, warning them about a critical flaw that could potentially allow hackers to bypass the lock screen on certain devices. This vulnerability, discovered by the Donjon security team, poses a significant risk as attackers can exploit it within a minute, gaining access to sensitive data stored on the phone.

The flaw, identified as CVE-2026-20435, specifically impacts Android devices powered by MediaTek processors, which are commonly found in budget-friendly smartphones. Security experts have highlighted that this vulnerability enables cybercriminals to extract encryption keys before the device fully boots up, circumventing security measures like full-disk encryption and lock screen protection.

Malwarebytes experts explained that approximately one in four Android phones, particularly lower-priced models, are affected by this vulnerability. By connecting a vulnerable device to a laptop via USB, researchers demonstrated how the exploit could retrieve the device’s PIN, decrypt storage, and extract sensitive information like seed phrases from software wallets.

Users concerned about this security threat are advised to check their device’s processor information in the Settings menu to see if it uses a MediaTek chip. If so, it is crucial to promptly install any available security updates to mitigate the risk. MediaTek has already released a patch for this issue, but users must ensure that their device receives the update from the manufacturer to stay protected.

It is essential to note that this attack requires physical access to the device, meaning users can lower the risk by keeping their device secure and up to date. However, older devices without regular updates may remain vulnerable, so users with such phones should exercise caution or consider upgrading to a more secure device.