CVE-2022-20214

2023-01-2400:00:00

google_android

www.cve.org

car settings

tapjacking

android 10-12

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

29.5%

JSON

In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to modify system settings without user consent.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-183411210

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Android",
    "versions": [
      {
        "version": "Android-10 Android-11 Android-12",
        "status": "affected"
      }
    ]
  }
]

References

source.android.com/security/bulletin/aaos/2023-01-01