{"id":"ASB-A-374257207","details":"In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-374257207","CVE-2025-22430"],"modified":"2026-04-17T15:55:28.020024Z","published":"2025-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/161eb6100d6f75f0a0df6da3d19da7fe842655c1"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-04-01"}]}],"versions":["15-next"],"ecosystem_specific":{"spl":"2025-04-01","vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/trust/TrustManagerService.java"},"id":"ASB-A-374257207-28674fa3","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["321446519818953500431330879684186164787","291294078306013525331275988611652788630","56476649094333308610883360736278233945","66929179648585267753078961545746891048","216698286285820199523426823288555281039","8346555484311413808854397499154355042","20895675777627396203762780193256024499","110160390254737233290409234959017968074","23736838960835562248806256791153436787"],"threshold":0.9},"source":"https://android.googlesource.com/platform/frameworks/base/+/389e4cf737571bf0c438239400295fd229acc3e8","signature_version":"v1"},{"target":{"function":"isInSignificantPlace","file":"services/core/java/com/android/server/trust/TrustManagerService.java"},"id":"ASB-A-374257207-3859db03","signature_type":"Function","deprecated":false,"digest":{"length":235,"function_hash":"38751169905517304207638231429544339956"},"source":"https://android.googlesource.com/platform/frameworks/base/+/389e4cf737571bf0c438239400295fd229acc3e8","signature_version":"v1"},{"target":{"file":"core/java/android/app/trust/TrustManager.java"},"id":"ASB-A-374257207-8d6e9531","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["156000479443855258528774032689142242144","154449135365432431231001049420813553775","155717844685745612035015824657523600415"],"threshold":0.9},"source":"https://android.googlesource.com/platform/frameworks/base/+/389e4cf737571bf0c438239400295fd229acc3e8","signature_version":"v1"}],"types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/389e4cf737571bf0c438239400295fd229acc3e8"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-374257207.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-04-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2025-04-01","vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/trust/TrustManagerService.java"},"id":"ASB-A-374257207-4550b330","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["132643709275463595038097277500448055431","291294078306013525331275988611652788630","56476649094333308610883360736278233945","66929179648585267753078961545746891048","216698286285820199523426823288555281039","8346555484311413808854397499154355042","20895675777627396203762780193256024499","110160390254737233290409234959017968074","23736838960835562248806256791153436787"],"threshold":0.9},"source":"https://android.googlesource.com/platform/frameworks/base/+/f085fccf0bb7963962ae56618c5b3a1762d3aeab","signature_version":"v1"},{"target":{"function":"isInSignificantPlace","file":"services/core/java/com/android/server/trust/TrustManagerService.java"},"id":"ASB-A-374257207-5d5e9309","signature_type":"Function","deprecated":false,"digest":{"length":235,"function_hash":"38751169905517304207638231429544339956"},"source":"https://android.googlesource.com/platform/frameworks/base/+/f085fccf0bb7963962ae56618c5b3a1762d3aeab","signature_version":"v1"},{"target":{"file":"core/java/android/app/trust/TrustManager.java"},"id":"ASB-A-374257207-eb2a0f23","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["156000479443855258528774032689142242144","154449135365432431231001049420813553775","155717844685745612035015824657523600415"],"threshold":0.9},"source":"https://android.googlesource.com/platform/frameworks/base/+/f085fccf0bb7963962ae56618c5b3a1762d3aeab","signature_version":"v1"}],"types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/f085fccf0bb7963962ae56618c5b3a1762d3aeab"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-374257207.json"}}],"schema_version":"1.7.5"}