CVE-2019-16241: Alcatelmobile Cingular Flip 2 Firmware

Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days.

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory. The System application that implements the lock screen checks for the existence of a specific file and disables PIN authentication if it exists. This file would typically be created via Android Debug Bridge (adb) over USB.

Affected products

• Alcatelmobile Cingular Flip 2 Firmware: version b9huah1 only

Published 2019-11-26. Last modified 2026-06-17.