CVE-2024-48336: Android Unsafe Create Package Contextcve-2024-48336-android-unsafe-create-package-context
The app dynamically loads code from another package using `createPackageContext` with `CONTEXT_IGNORE_SECURITY` without checking if the target package is a verified system application. This allows local privilege escalation via package squatting, enabling untrusted code execution. Verify the package against `ApplicationInfo.FLAG_SYSTEM` or properly check its