CVE-2025-22427 — In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due to a logic error in the code. This could lead to local escala — CVE Database · The Intelligence Room