A vulnerability in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify installation restrictions of specific applications due to insufficient verification of data authenticity. This flaw does not impact confidentiality or availability but can lead to unauthorized modification of installation policies.