CVE-2021-39617: In multiple buttons of grant_permissions.xml, there is a possible way to bypass permissions dialogs due to a tapjacking/overlay attack. This could lead to…

In multiple buttons of grant_permissions.xml, there is a possible way to bypass permissions dialogs due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
google	android	—	—
platform	frameworks_base	>= 11:0 < 11:2023-05-01	11:2023-05-01
platform	frameworks_base	>= 12:0 < 12:2023-05-01	12:2023-05-01
platform	frameworks_native	>= 11:0 < 11:2023-05-01	11:2023-05-01
platform	frameworks_native	>= 12:0 < 12:2023-05-01	12:2023-05-01
platform	frameworks_native	>= 12L:0 < 12L:2023-05-01	12L:2023-05-01
platform	frameworks_native	>= 13-next:0 < 13-next:2023-05-01	13-next:2023-05-01
platform	packages_apps_packageinstaller	>= 11:0 < 11:2023-05-01	11:2023-05-01
platform	packages_modules_permission	>= 12:0 < 12:2023-05-01	12:2023-05-01
platform	packages_modules_permission	>= 13-next:0 < 13-next:2023-05-01	13-next:2023-05-01

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.