CVE-2026-57042

Name of the Vulnerable Software and Affected Versions Google Android (affected versions not specified)

Description Multiple functions within DreamPickerReceiver.kt are susceptible to a permission bypass caused by a confused deputy. A confused deputy is a security issue where a privileged entity is tricked by a less privileged entity into performing an action it is not authorized to do. This flaw could allow for local escalation of privilege, granting the attacker System execution privileges without requiring user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.