CVE-2026-49903

The ClusterRenderingService.dump method, accessible to processes holding android.permission.DUMP and android.permission.PACKAGEUSAGESTATS, acts as a confused deputy. It allows attackers to write arbitrary values to Settings.Global.OVERLAYDISPLAYDEVICES, an operation normally requiring...

CVE-2026-49903

The ClusterRenderingService.dump() method in Android acts as a confused deputy , allowing processes with android.permission.DUMP and android.permission.PACKAGE_USAGE_STATS to bypass permission requirements. Attackers can write arbitrary values to Settings.Global.OVERLAY_DISPLAY_DEVICES , a privil...

EUVD-2026-115615

The ClusterRenderingService.dump method, accessible to processes holding android.permission.DUMP and android.permission.PACKAGEUSAGESTATS, acts as a confused deputy. It allows attackers to write arbitrary values to Settings.Global.OVERLAYDISPLAYDEVICES, an operation normally requiring...

CVE-2026-49903

The ClusterRenderingService.dump method, accessible to processes holding android.permission.DUMP and android.permission.PACKAGEUSAGESTATS, acts as a confused deputy. It allows attackers to write arbitrary values to Settings.Global.OVERLAYDISPLAYDEVICES, an operation normally requiring...

PT-2026-135799

The ClusterRenderingService.dump method, accessible to processes holding android.permission.DUMP and android.permission.PACKAGE USAGE STATS, acts as a confused deputy. It allows attackers to write arbitrary values to Settings.Global.OVERLAY DISPLAY DEVICES, an operation normally requiring...

Linux kernel File System Unauthorized Access

The vulnerability of the file system that overlays the Linux operating system’s kernel is related to improper handling of permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...