Android permission prompts can be tricked by screen overlay attacks
Fake apps covering the screen can trick you into giving away Android permissions.
Summary
A tapjacking or overlay attack can trick a user into accepting a permission request. This could let an attacker gain higher privileges on the device. The record lists Android 15 and 14 as affected.
Affected when
- User must be tricked into accepting a permission
What to do
We have not confirmed a fixed version yet. Check the source links below.
Products and platforms
CVE IDs
Times
First published
First seen