CVE-2016-2496 The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and access arbitrary private-storage files by creating a partially ove...
CriticalCVSS 9.8
EPSS 0.91%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and access arbitrary private-storage files by creating a partially overlapping window, aka internal bug 26677796.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | = 6.0 | No fix listed |
| Google Android | = 6.0.1 | No fix listed |
References
- source.android.com release-notes vendor-advisory
- android.googlesource.com patch
- android.googlesource.com patch
- android.googlesource.com patch