Android Framework Tapjacking Vulnerability Leading to Local Privilege Escalation

A tapjacking vulnerability has been identified in the Android Framework, allowing an overlay attack that could trick users into unintentionally accepting permissions. This issue could lead to local privilege escalation without requiring additional execution privileges. The vulnerability is present in multiple Android versions.

Impact

Exploitation of this vulnerability could result in unauthorized permission grants, allowing for elevated privileges on the affected device.

Reproduction

The vulnerability can be reproduced by creating an overlay that covers a permission request. Once the overlay is in place, the user can be manipulated into accepting the permission, which can then be exploited to gain elevated privileges.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.