ASB-A-338024220

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-338024220.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-338024220
Aliases
  • A-338024220
  • CVE-2025-22421
Published
2025-04-01T00:00:00Z
Modified
2025-09-19T20:50:49.344728Z
Summary
[none]
Details

In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak through the lockscreen due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15-next:0
Fixed
15-next:2025-04-01

Affected versions

Other

15-next

Ecosystem specific 

{
    "severity": "High",
    "spl": "2025-04-01",
    "types": [
        "ID"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/e55a350cb80404544d2b227b4de0058505788c3c",
        "https://android.googlesource.com/platform/frameworks/base/+/0674f38d3a5d0d469b68e04cfc1e320a3227c8a7"
    ]
}

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-04-01

Affected versions

Other

15

Ecosystem specific 

{
    "severity": "High",
    "spl": "2025-04-01",
    "types": [
        "ID"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/9d00ab315dd7d661e71b5fcc51152ced2b2ae28a"
    ]
}

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-04-01

Affected versions

Other

13

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1aa8f6d4de1c1e731fe1757c3f9d0115ba7c7d68",
            "id": "ASB-A-338024220-d4afcb28",
            "deprecated": false,
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/statusbar/StatusBarIconView.java",
                "function": "contentDescForNotification"
            },
            "digest": {
                "length": 861.0,
                "function_hash": "272641791795843317539035139951254249152"
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1aa8f6d4de1c1e731fe1757c3f9d0115ba7c7d68",
            "id": "ASB-A-338024220-fc9bb9e7",
            "deprecated": false,
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/statusbar/StatusBarIconView.java"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "123355636111071642314580884707686804340",
                    "253207037034010904802763923856606144898",
                    "269744729046037479528908802726254815747",
                    "305295502505864695356027994991517792708",
                    "124795081146475036575687833772928737478",
                    "246870881382455333361181585451852320026",
                    "129579010542382146278710402961519900373",
                    "270844517411334464386640307366842266391",
                    "228377645856565604324353275590218735697",
                    "298768647893865552950213944748235300003"
                ]
            }
        }
    ],
    "severity": "High",
    "spl": "2025-04-01",
    "types": [
        "ID"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/1aa8f6d4de1c1e731fe1757c3f9d0115ba7c7d68"
    ]
}

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-04-01

Affected versions

Other

14

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1aa8f6d4de1c1e731fe1757c3f9d0115ba7c7d68",
            "id": "ASB-A-338024220-36eccad5",
            "deprecated": false,
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/statusbar/StatusBarIconView.java",
                "function": "contentDescForNotification"
            },
            "digest": {
                "length": 861.0,
                "function_hash": "272641791795843317539035139951254249152"
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1aa8f6d4de1c1e731fe1757c3f9d0115ba7c7d68",
            "id": "ASB-A-338024220-9a4e6df1",
            "deprecated": false,
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/statusbar/StatusBarIconView.java"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "123355636111071642314580884707686804340",
                    "253207037034010904802763923856606144898",
                    "269744729046037479528908802726254815747",
                    "305295502505864695356027994991517792708",
                    "124795081146475036575687833772928737478",
                    "246870881382455333361181585451852320026",
                    "129579010542382146278710402961519900373",
                    "270844517411334464386640307366842266391",
                    "228377645856565604324353275590218735697",
                    "298768647893865552950213944748235300003"
                ]
            }
        }
    ],
    "severity": "High",
    "spl": "2025-04-01",
    "types": [
        "ID"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/1aa8f6d4de1c1e731fe1757c3f9d0115ba7c7d68"
    ]
}