Android Framework Information Disclosure Vulnerability in Trust Manager

A vulnerability allowing access to sensitive information has been identified in the Android Framework's Trust Manager component. This issue arises from a missing permission check in the 'isInSignificantPlace' method, which could lead to local information disclosure without requiring additional execution privileges or user interaction. The vulnerability affects Android versions 13, 14, and 15.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information.

Remediation

Users can update their devices to the April 2025 security patch level to address this vulnerability.