CyberRota Analysis
AI-GeneratedThe vulnerability arises from a misleading UI in the onCreate method of InstallLaunch.kt, which is susceptible to tapjacking or overlay attacks. This flaw allows for local escalation of privilege without requiring additional execution privileges or user interaction, potentially compromising user security. Developers and security teams should prioritize this issue to mitigate risks associated with unauthorized access and privilege escalation in their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Related CVEs
Other vulnerabilities affecting the same vendor(s)