In setForceHideNonSystemOverlayWindowIfNeeded of...
High severity
Unreviewed
Published
Aug 16, 2024
to the GitHub Advisory Database
•
Updated Aug 16, 2024
Description
Published by the National Vulnerability Database
Aug 15, 2024
Published to the GitHub Advisory Database
Aug 16, 2024
Last updated
Aug 16, 2024
In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaver while lock screen visibility settings are restricted by the user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References