Android Documents UI Tapjacking Vulnerability Leading to Privilege Escalation

A tapjacking vulnerability has been identified in the Android Documents UI, allowing for a possible overlay attack. This issue could lead to local escalation of privilege, requiring user interaction for exploitation. The vulnerability is present in multiple versions of Android, specifically 12, 12L, 13, 14, and 15.

Impact

Exploitation of this vulnerability could result in unauthorized access to restricted folders, allowing a user to gain elevated privileges on the device.

Remediation

Users can update their devices to the January 2025 security patch level to address this vulnerability.