CyberRota Analysis
AI-GeneratedThe vulnerability in ContactsPickerActivity.kt allows for a tapjacking or overlay attack, potentially misleading users and leading to local information disclosure without requiring additional execution privileges. Exploitation does not necessitate user interaction, making it particularly concerning for applications that handle sensitive data. Developers and security teams should prioritize addressing this issue to safeguard user information against unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.