CVE-2021-40834: 
NixOS vulnerability analysis and mitigation

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When a user clicks on a specially crafted seemingly legitimate URL, SAFE browser goes into full screen and hides the user interface. This vulnerability was assigned CVE-2021-40834 and affects F-Secure SAFE Browser versions prior to 18.5 (CERT-FR).

The vulnerability allows a remote attacker to perform spoofing attacks by exploiting the browser's full-screen functionality. When exploited, the browser enters full-screen mode and conceals the user interface elements, potentially misleading users about the authenticity of the displayed content (CVE Details).

A successful exploitation of this vulnerability could allow an attacker to perform spoofing attacks, potentially deceiving users about the legitimacy of websites they are visiting. This could lead to phishing attacks where users believe they are interacting with legitimate websites while actually viewing malicious content (CERT-FR).

Users should upgrade to F-Secure SAFE Browser version 18.5 or later which contains fixes for this vulnerability (CERT-FR).