LG V10 is the real flagship launched by LG at the end of 2015. It is also the first flagship of LG to use metal body and fingerprint identification (although only stainless steel is added on both sides). It never rains but it pours. After the LG G4 crashed, the LG V10 was exposed to have a fingerprint identification vulnerability.
The left is the system activities list, and the right is the fingerprint entry interface
This vulnerability is not due to fingerprint identification itself, but in the process of fingerprint entry. Usually, the fingerprint needs to be verified with the host fingerprint or password before entering to prevent others from taking the opportunity to add fingerprints. However, LG V10 can use an app (such as NOVA desktop) with a shortcut to create activity (similar to function entry), skip the verification steps of the host fingerprint/password, and add fingerprints directly
Similar methods may also be applicable to many fingerprint identification models, but the risk of this vulnerability is not high. After the phone is unlocked, a third-party application is installed and fingerprint entry is completed. This is a time-consuming operation in itself. V10 users need not worry too much.
The LG official did not respond to this. Before the vulnerability is repaired, the simplest preventive measure is to fill in the four preset fingerprint positions first