PT-2026-135704

In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode ECM bypass vulnerability that allows a sideloaded application to modify the package source during a self-update due to a logic error in the code. This could lead to local escalation of privile...