Tapjacking Vulnerability in Android Framework by Google

CVE-2025-48528

What is CVE-2025-48528?

A vulnerability within the Google Android Framework allows attackers to exploit tapjacking techniques, enabling biometric overlays. This flaw permits local escalation of privilege without requiring any additional execution privileges. Notably, successful exploitation of this vulnerability does not necessitate user interaction, highlighting the significant risk posed to users. The potential for abuse presents serious implications for device security, requiring immediate attention from developers and users alike.

References