In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to modify system settings without user consent.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-183411210
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/aaos/2023-01-01 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2023-01-26 21:15
Updated : 2024-02-28 19:51
NVD link : CVE-2022-20214
Mitre link : CVE-2022-20214
CVE.ORG link : CVE-2022-20214
JSON object : View
Products Affected
- android
CWE
CWE-1021
Improper Restriction of Rendered UI Layers or Frames