Executive Summary

This vulnerability exists in the InputInterceptor component of Letterbox.java. It allows an attacker to trick a user into accepting a permission through a tapjacking or overlay attack.

The attack can lead to a local escalation of privilege without requiring any additional execution privileges.

Notably, user interaction is not needed for exploitation, meaning the attacker can exploit this vulnerability without the user actively performing any action.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker to escalate their privileges locally on the affected system.

Because the attack can be performed without additional execution privileges and without user interaction, it increases the risk of unauthorized access or control.

Such privilege escalation could potentially allow attackers to perform actions or access data that should be restricted.

Useful 0 Not Useful 0