CVE-2025-26452

Google Android is susceptible to a local elevation of privilege vulnerability located in the loadDrawableForCookie function of ResourcesImpl.java. This flaw arises from a confused deputy issue, which allows an attacker to access task snapshots belonging to other applications. Exploitation of this...

ASB-A-383080440

In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...