Overlay Over SystemUI Dialogs

2023-05-0100:00:00

Google

osv.dev

overlay attack

systemui dialogs

grant_permissions.xml vulnerability

local privilege escalation

user interaction

0 Low

EPSS

Percentile

0.0%

JSON

In multiple buttons of grant_permissions.xml, there is a possible way to bypass permissions dialogs due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CPENameOperatorVersion
platform/frameworks/nativeeq12
platform/packages/modules/permissioneq11
platform/packages/modules/permissioneq12L
platform/frameworks/nativeeq12L
platform/frameworks/nativeeq11
platform/packages/modules/permissioneq12

Name	Operator	Version
platform/frameworks/native	eq	12
platform/packages/modules/permission	eq	11
platform/packages/modules/permission	eq	12L
platform/frameworks/native	eq	12L
platform/frameworks/native	eq	11
platform/packages/modules/permission	eq	12