Google Android Automotive Os权限提升漏洞

Google Android Automotive Os is an operating system and platform from Google, Inc. that runs directly on in-vehicle hardware. an elevation of privilege vulnerability exists in Google Android Automotive Os, which originates in the AndroidManifest.xml LocationSettingsActivity, where an EoP may exist due to a Tapjacking/overlay attack. An attacker could exploit the vulnerability to cause a local privilege escalation without additional executive privileges. Development requires user interaction.