{"id":"ASB-A-196970023", "published":"2021-12-01T00:00:00Z", "modified":"2026-05-01T15:24:27.653932157Z", "aliases":["CVE-2021-0970", "A-196970023"], "details":"In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-12-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8bcd86e6626a38df525507cd25044cc9592b9b0d"], "severity":"High", "spl":"2021-12-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["124025345072694331739214173039099576593", "162778159953647138094938789303301591407", "271619544187844072394449961820309288291", "55935293887020478280648402898434146389", "158717058656457652709433784362727591795", "249890113988591899345578852558713682626", "51694359095882752951811469354253459794", "191102558873463797989262390257008705482", "106327189159305073122011856448853079221"], "threshold":0.9}, "id":"ASB-A-196970023-134e6f2b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8bcd86e6626a38df525507cd25044cc9592b9b0d", "target":{"file":"location/java/android/location/GpsNavigationMessage.java"}}, {"deprecated":false, "digest":{"function_hash":"86420969651292207696714084519346521043", "length":550}, "id":"ASB-A-196970023-f9e28f9f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8bcd86e6626a38df525507cd25044cc9592b9b0d", "target":{"file":"location/java/android/location/GpsNavigationMessage.java", "function":"createFromParcel"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-12-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a1b4297002b927ce0fc795c0ac1d45a6a200b43b"], "severity":"High", "spl":"2021-12-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"86420969651292207696714084519346521043", "length":550}, "id":"ASB-A-196970023-7645c0e4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/a1b4297002b927ce0fc795c0ac1d45a6a200b43b", "target":{"file":"location/java/android/location/GpsNavigationMessage.java", "function":"createFromParcel"}}, {"deprecated":false, "digest":{"line_hashes":["124025345072694331739214173039099576593", "162778159953647138094938789303301591407", "271619544187844072394449961820309288291", "55935293887020478280648402898434146389", "158717058656457652709433784362727591795", "249890113988591899345578852558713682626", "51694359095882752951811469354253459794", "191102558873463797989262390257008705482", "106327189159305073122011856448853079221"], "threshold":0.9}, "id":"ASB-A-196970023-9e0ccb20", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/a1b4297002b927ce0fc795c0ac1d45a6a200b43b", "target":{"file":"location/java/android/location/GpsNavigationMessage.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-12-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1903539154df194722ce5f0dbbd38e18f8c1fc12"], "severity":"High", "spl":"2021-12-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["124025345072694331739214173039099576593", "162778159953647138094938789303301591407", "271619544187844072394449961820309288291", "55935293887020478280648402898434146389", "158717058656457652709433784362727591795", "249890113988591899345578852558713682626", "51694359095882752951811469354253459794", "191102558873463797989262390257008705482", "106327189159305073122011856448853079221"], "threshold":0.9}, "id":"ASB-A-196970023-9e894fc6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1903539154df194722ce5f0dbbd38e18f8c1fc12", "target":{"file":"location/java/android/location/GpsNavigationMessage.java"}}, {"deprecated":false, "digest":{"function_hash":"86420969651292207696714084519346521043", "length":550}, "id":"ASB-A-196970023-a4b1cdc9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1903539154df194722ce5f0dbbd38e18f8c1fc12", "target":{"file":"location/java/android/location/GpsNavigationMessage.java", "function":"createFromParcel"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2021-12-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/dca80fea22fc71b0a1fc2c26af8daa2a3b65f2f6"], "severity":"High", "spl":"2021-12-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["124025345072694331739214173039099576593", "162778159953647138094938789303301591407", "271619544187844072394449961820309288291", "55935293887020478280648402898434146389", "158717058656457652709433784362727591795", "249890113988591899345578852558713682626", "51694359095882752951811469354253459794", "191102558873463797989262390257008705482", "106327189159305073122011856448853079221"], "threshold":0.9}, "id":"ASB-A-196970023-172dd4e0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/dca80fea22fc71b0a1fc2c26af8daa2a3b65f2f6", "target":{"file":"location/java/android/location/GpsNavigationMessage.java"}}, {"deprecated":false, "digest":{"function_hash":"86420969651292207696714084519346521043", "length":550}, "id":"ASB-A-196970023-d8399d06", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/dca80fea22fc71b0a1fc2c26af8daa2a3b65f2f6", "target":{"file":"location/java/android/location/GpsNavigationMessage.java", "function":"createFromParcel"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-12-01"}]}