Local privilege escalation via input-handle race

Use-after-free in Android 11 Framework allows local users to escalate privileges through the input application handle. Concurrent writes from the window manager let Input Dispatcher read mutable fields from the same InputApplicationInfo instance, leaving updateInfo able to follow freed memory. A local malicious application needs no additional execution privileges or user interaction and can gain elevated control over the device.