In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.
History

Tue, 02 Sep 2025 22:30:00 +0000

Type Values Removed Values Added
Description In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: google_android

Published:

Updated: 2025-09-02T22:11:11.657Z

Reserved: 2025-01-06T17:44:53.633Z

Link: CVE-2025-22419

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-09-02T23:15:33.400

Modified: 2025-09-02T23:15:33.400

Link: CVE-2025-22419

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.