Exploiting PendingIntent Provenance Confusion to Spoof Android SDK Authentication. - Ramanpreet Singh Khinda (CoRR, 2026)