{"id":"ASB-A-338024220","details":"In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak through the lockscreen due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-338024220","CVE-2025-22421"],"modified":"2026-04-03T15:37:31.002635Z","published":"2025-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/3b0704fd381a1ea32591aba99be3a9e4e6830be2"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-04-01"}]}],"versions":["15-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e55a350cb80404544d2b227b4de0058505788c3c","https://android.googlesource.com/platform/frameworks/base/+/0674f38d3a5d0d469b68e04cfc1e320a3227c8a7"],"types":["ID"],"severity":"High","spl":"2025-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-338024220.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-04-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9d00ab315dd7d661e71b5fcc51152ced2b2ae28a"],"types":["ID"],"severity":"High","spl":"2025-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-338024220.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-04-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1aa8f6d4de1c1e731fe1757c3f9d0115ba7c7d68"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/1aa8f6d4de1c1e731fe1757c3f9d0115ba7c7d68","signature_version":"v1","deprecated":false,"target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/StatusBarIconView.java","function":"contentDescForNotification"},"digest":{"function_hash":"272641791795843317539035139951254249152","length":861},"signature_type":"Function","id":"ASB-A-338024220-d4afcb28"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/1aa8f6d4de1c1e731fe1757c3f9d0115ba7c7d68","signature_version":"v1","deprecated":false,"target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/StatusBarIconView.java"},"digest":{"threshold":0.9,"line_hashes":["123355636111071642314580884707686804340","253207037034010904802763923856606144898","269744729046037479528908802726254815747","305295502505864695356027994991517792708","124795081146475036575687833772928737478","246870881382455333361181585451852320026","129579010542382146278710402961519900373","270844517411334464386640307366842266391","228377645856565604324353275590218735697","298768647893865552950213944748235300003"]},"signature_type":"Line","id":"ASB-A-338024220-fc9bb9e7"}],"types":["ID"],"severity":"High","spl":"2025-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-338024220.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-04-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1aa8f6d4de1c1e731fe1757c3f9d0115ba7c7d68"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/1aa8f6d4de1c1e731fe1757c3f9d0115ba7c7d68","signature_version":"v1","deprecated":false,"target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/StatusBarIconView.java","function":"contentDescForNotification"},"digest":{"function_hash":"272641791795843317539035139951254249152","length":861},"signature_type":"Function","id":"ASB-A-338024220-36eccad5"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/1aa8f6d4de1c1e731fe1757c3f9d0115ba7c7d68","signature_version":"v1","deprecated":false,"target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/StatusBarIconView.java"},"digest":{"threshold":0.9,"line_hashes":["123355636111071642314580884707686804340","253207037034010904802763923856606144898","269744729046037479528908802726254815747","305295502505864695356027994991517792708","124795081146475036575687833772928737478","246870881382455333361181585451852320026","129579010542382146278710402961519900373","270844517411334464386640307366842266391","228377645856565604324353275590218735697","298768647893865552950213944748235300003"]},"signature_type":"Line","id":"ASB-A-338024220-9a4e6df1"}],"types":["ID"],"severity":"High","spl":"2025-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-338024220.json"}}],"schema_version":"1.7.5"}