Android Tapjacking Vulnerability in WindowInfo WriteToParcel Function Allowing Privilege Escalation

A vulnerability has been identified in the Android WindowInfo component, specifically in the writeToParcel function. This issue involves a tapjacking or overlay attack, where a user could be manipulated into accepting a permission. Exploitation of this vulnerability could lead to local privilege escalation without requiring additional execution privileges. Notably, user interaction is not necessary for the exploitation to occur.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system.