Local Information Disclosure Flaw in Android Framework by Google

CVE-2025-22421

What is CVE-2025-22421?

A vulnerability exists in the Android Framework due to a logic error in the contentDescForNotification function of NotificationContentDescription.kt. This flaw allows sensitive notification content to be unintentionally displayed on the lockscreen, leading to potential local information disclosure without requiring any elevated execution privileges or user interaction for exploitation. As a result, users' private information could be exposed inadvertently, making it crucial to patch this issue promptly to maintain user privacy and security.

References