CVE Catalog
CVE-2016-2496
CriticalSummary
The Framework UI permission-dialog implementation in Android 6.x before June 1, 2016, allows attackers to conduct tapjacking attacks and access arbitrary private-storage files by creating a partially overlapping window.
Risk Assessment
Attackers may gain access to sensitive user data, potentially leading to privacy breaches and information security issues.
Recommendation
It is recommended to update the Android system to a version after June 1, 2016, to mitigate this vulnerability and reduce the risk of tapjacking attacks.
Original NVD description (English source)
The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and access arbitrary private-storage files by creating a partially overlapping window, aka internal bug 26677796.