← Database

CVE-2022-20214

MEDIUM CVSS: 4.7 Published: 2023-01-26 Modified: 2026-06-17

Description

In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to modify system settings without user consent.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-183411210

Affected Platforms

Google Android

Weakness Type

CWE-1021, CWE-1021

References