Threats tagged 'ghsa-27w8-h9c5-p783'

An unprivileged Android application can bypass the android.car.permission.CAR_DISPLAY_IN_CLUSTER permission by registering an activity with the android.car.cluster.NAVIGATION category and requesting navigation app focus. The privileged ClusterHomeSample application then launches this third-party activity on the instrument cluster display without enforcing permission checks, allowing persistent display of potentially misleading or distracting content.