{"id":"ASB-A-177561690", "published":"2021-04-01T00:00:00Z", "modified":"2026-06-17T15:23:34.405473849Z", "aliases":["CVE-2021-0400", "A-177561690"], "details":"In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due to improper input validation. This could lead to incorrect reporting of location data to emergency services with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-04-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/579b74d5cbb08b8dd3461f484cdebcbd9e64c656"], "severity":"High", "spl":"2021-04-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"281177864577035610064103641308514956885", "length":148}, "id":"ASB-A-177561690-2da51732", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/579b74d5cbb08b8dd3461f484cdebcbd9e64c656", "target":{"file":"services/core/java/com/android/server/location/GnssLocationProvider.java", "function":"handleUpdateLocation"}}, {"deprecated":false, "digest":{"line_hashes":["257757970397882978073075761855931332674", "79671540842942165796507493259390264481", "17592790157259100566252929660173604132", "60577984668212041363010518837147285755", "163619473527643612292974234204187349793", "89135679412966756822938004620278974713", "2611475514712806146582139879647525261", "222912424006289734928092950474953386594"], "threshold":0.9}, "id":"ASB-A-177561690-7bd06ed7", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/579b74d5cbb08b8dd3461f484cdebcbd9e64c656", "target":{"file":"services/core/java/com/android/server/location/GnssLocationProvider.java"}}, {"deprecated":false, "digest":{"function_hash":"26997292164509738480091834412491593945", "length":914}, "id":"ASB-A-177561690-d70e7dee", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/579b74d5cbb08b8dd3461f484cdebcbd9e64c656", "target":{"file":"services/core/java/com/android/server/location/GnssLocationProvider.java", "function":"injectBestLocation"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-04-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c59cbd13f62586bf1eaeb75767859ed08f3adeb1"], "severity":"High", "spl":"2021-04-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"140260039340534588354822541116292943023", "length":219}, "id":"ASB-A-177561690-00da9456", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c59cbd13f62586bf1eaeb75767859ed08f3adeb1", "target":{"file":"services/core/java/com/android/server/location/GnssLocationProvider.java", "function":"handleUpdateLocation"}}, {"deprecated":false, "digest":{"line_hashes":["257757970397882978073075761855931332674", "212930901082601694011779906740333081190", "15339551320205961031815097056454159374", "303901538576778438959015725729801495819", "163619473527643612292974234204187349793", "89135679412966756822938004620278974713", "198395490762439878478707754843082150451", "35853744024539631520651606170416991408"], "threshold":0.9}, "id":"ASB-A-177561690-66743a2b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c59cbd13f62586bf1eaeb75767859ed08f3adeb1", "target":{"file":"services/core/java/com/android/server/location/GnssLocationProvider.java"}}, {"deprecated":false, "digest":{"function_hash":"104977619292184249797167077362633210140", "length":1199}, "id":"ASB-A-177561690-a9f80a8c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c59cbd13f62586bf1eaeb75767859ed08f3adeb1", "target":{"file":"services/core/java/com/android/server/location/GnssLocationProvider.java", "function":"injectBestLocation"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-04-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e8212659b95b8a68ce32a82d8548d88aaeb4608a"], "severity":"High", "spl":"2021-04-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"140260039340534588354822541116292943023", "length":219}, "id":"ASB-A-177561690-23611178", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/e8212659b95b8a68ce32a82d8548d88aaeb4608a", "target":{"file":"services/core/java/com/android/server/location/gnss/GnssLocationProvider.java", "function":"injectLocation"}}, {"deprecated":false, "digest":{"line_hashes":["257757970397882978073075761855931332674", "212930901082601694011779906740333081190", "15339551320205961031815097056454159374", "303901538576778438959015725729801495819", "331198286719909576332180223253389574950", "221553241774006473985829700771215306402", "102684752914688777506994293548748871684", "127744199569913252102156907612769223972"], "threshold":0.9}, "id":"ASB-A-177561690-854db752", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/e8212659b95b8a68ce32a82d8548d88aaeb4608a", "target":{"file":"services/core/java/com/android/server/location/gnss/GnssLocationProvider.java"}}, {"deprecated":false, "digest":{"function_hash":"104977619292184249797167077362633210140", "length":1199}, "id":"ASB-A-177561690-f7034bfe", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/e8212659b95b8a68ce32a82d8548d88aaeb4608a", "target":{"file":"services/core/java/com/android/server/location/gnss/GnssLocationProvider.java", "function":"injectBestLocation"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-04-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/95602e325ae1ee9cf383db38cb0a8d47567618dc"}]}