CVE-2022-20553

Name of the Vulnerable Software and Affected Versions Android versions Android-13

Description The issue is related to a tapjacking/overlay attack in the onCreate method of LogAccessDialogActivity.java. This could allow bypassing a permission check, leading to local escalation of privilege with System execution privileges needed. User interaction is required for exploitation.

Recommendations For Android version Android-13, consider restricting access to the LogAccessDialogActivity until a patch is available. As a temporary workaround, avoid using the onCreate method of LogAccessDialogActivity.java to minimize the risk of exploitation.