Description
In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the ControlsSettingsDialog due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Problem types
Elevation of privilege
Product status
16
15
14
References
android.googlesource.com/...c49b638334ed676223e7191178074da9
source.android.com/security/bulletin/2025-09-01
