Lucene search

K
osvGoogleOSV:ASB-A-157929241
HistoryJun 01, 2022 - 12:00 a.m.

WindowManager.LayoutParams.FLAG_SLIPPERY allows for bypass of MotionEvent.FLAG_WINDOW_IS_PARTIALLY_OBSCURED

2022-06-0100:00:00
Google
osv.dev
39
windowmanager
tapjacking attack
privilege escalation
user interaction

EPSS

0

Percentile

5.1%

In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-157929241