Android Tapjack Attack Vulnerability in WindowManagerService Allowing Local Privilege Escalation

A vulnerability has been identified in the relayoutWindow function of WindowManagerService.java, where a missing permission check creates a potential tapjack attack. This flaw could lead to local privilege escalation without requiring additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation.