PT-2022-10925 · Google · Android

Published

2022-12-15

·

Updated

2023-03-03

·

CVE-2021-39617

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Android versions Android-11 through Android-12L
Description The issue allows for a tapjacking/overlay attack in the user interface buttons of PermissionController, potentially leading to local escalation of privilege without requiring additional execution privileges. User interaction is necessary for exploitation.
Recommendations For Android versions Android-11 through Android-12L, consider restricting access to the PermissionController interface until a fix is available. As a temporary workaround, avoid using the affected user interface buttons in PermissionController to minimize the risk of exploitation.

Related Identifiers

CVE-2021-39617

Affected Products

Android