ASB-A-141745510

Import Source

https://storage.googleapis.com/android-osv/ASB-A-141745510.json

Aliases

CVE-2020-0099

Published

2020-12-01T00:00:00Z

Modified

2024-04-25T14:40:09Z

Details

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

8.0:0

Fixed

8.0:2020-12-01

Introduced

8.1:0

Fixed

8.1:2020-12-01

Introduced

9:0

Fixed

9:2020-12-01

Introduced

10:0

Fixed

10:2020-12-01

Affected versions

Other

8.*

8.0

8.1

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/d0746b46a5d8049a7105a16eb25c44810376527e"
    ],
    "spl": "2020-12-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}