PT-2025-43507 · Unknown · Windowmanagerservice.Java

CVE-2025-48634

·

Publicado

2025-10-23

·

Atualizado

2026-03-04

CVSS v3.1

8.4

Alta

VetorAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions WindowManagerService.java (affected versions not specified)
Description A potential tapjack attack exists in the relayoutWindow function of WindowManagerService.java due to a missing permission check. Successful exploitation could lead to local escalation of privilege without requiring additional execution privileges or user interaction.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

ASB-A-406243581
CVE-2025-48634

Produtos afetados

Windowmanagerservice.Java