Android Telephony Services Tapjacking Vulnerability Leading to Privilege Escalation

A tapjacking vulnerability has been identified in multiple components of the Android Telephony services, allowing for misleading user interactions that could enable malicious call forwarding. This issue could result in a local escalation of privileges, requiring user execution rights for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized call forwarding, potentially allowing for interception of calls or manipulation of call-related features.

Remediation

Users can update their devices to the April 2025 security patch level to address this vulnerability.