Tapjacking Vulnerability in Android Framework by Google

CVE-2025-22417

What is CVE-2025-22417?

A vulnerability exists in the Android Framework's finishTransition function in Transition.java that allows an attacker to potentially bypass touch filtering restrictions by leveraging tapjacking or overlay attacks. This exploitation can result in local privilege escalation without requiring additional execution permissions. It is important to note that user interaction is necessary for the successful execution of this attack, underscoring the need for vigilance when interacting with applications that may be compromised.

References