Samsung has confirmed that they are working on a fix for a flaw that allows bypassing of the lock screen. The bug was posted to the internet today and shows a method for bypassing the lock screen, permanently, if you have enough time to download an app from the Play Store.

The steps to reproduce the bug are below:

1. From the lock screen, hit the emergency call button.
2. Dial a non-existent emergency services number - e.g. 0.
3. Press the green dial icon.
4. Dismiss the error message.
5. Press the phone's back button.
6. The app's screen will be briefly displayed.
7. This is just about long enough to interact with the app.
8. Using this, you can run and interact with any app / widget / settings menu.
9. You can also use this to launch the dialler.
10. From there, you can dial any phone number (one digit at a time) and place a phone call.
11. With Google Play, you can search for apps using the voice interface.
12. You can download apps from the app store which will disable the screen lock.

The bug is only present on Samsung's implementation of Android. It doesn't seem to affect the stock build. In a statement, Samsung said, "We are aware of this issue and will release a fix at the earliest possibility. Samsung considers user privacy and the security of user data its top priority."