Android Framework Tapjacking Vulnerability Leading to Privilege Escalation

A tapjacking vulnerability has been identified in the Android Framework, specifically in the Package Installer component. This issue allows an overlay attack on the installation confirmation dialog, potentially leading to local privilege escalation. The vulnerability exists in multiple versions of Android and can be exploited without any additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the March 2025 security patch level to address this vulnerability.