Skip to content
OpenAdvisories
Medium · 4.7 CVE-2022-20214 EUVD-2022-25474GHSA-2c4q-pqm9-78g4

In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle butto…

Published Jan 24, 2023 · Updated Apr 1, 2025 · Assigned by google_android

Description

In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to modify system settings without user consent.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-183411210

Affected products

VendorProductAffectedFixed
— Android Android-10 Android-11 Android-12 —

References