CVE-2019-2125

In ChangeDefaultDialerDialog.java, there is a possible escalation of privilege due to an overlay attack. This could lead to local escalation of privilege, granting privileges to a local app without the user's informed consent, with no additional privileges needed. User interaction is needed for...

CVE-2019-2125

CVE-2019-2125 affects Android where in ChangeDefaultDialerDialog.java an overlay attack can lead to local escalation of privilege without additional privileges. The root cause is an overlay-based elevation of privilege that allows a local app to gain higher privileges with user interaction requir...