{"id":"ASB-A-154319182","details":"In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-154319182","CVE-2020-0417"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-07-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-07-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/2b313d61aed6d99cb2a3ac2dad6f7d3993d0b8ac"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-07-01"}]}],"versions":["8.1"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/8b7811ce591b323549ce12e431a9f3c67a5372d9","target":{"file":"location/java/com/android/internal/location/GpsNetInitiatedHandler.java"},"deprecated":false,"digest":{"line_hashes":["57141771402374943506444044509408161720","274057428375888562584514121329737596111","145652496039882957379333952445927871354","97688537567720862757721685389724416698","139122145963004324395830361507533857666","63231585868942792336342622950260358008","161165112668534886843417182007256599493","239705283513759286004433642441149429883","200995080633005232385177291793598987622","156393830719532173149198413257072590111","155738557280113600894787057299773183410","63999223285240360490227071946833483534","146296754870920387483584432745122437982"],"threshold":0.9},"id":"ASB-A-154319182-75d85c51","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8b7811ce591b323549ce12e431a9f3c67a5372d9","target":{"function":"setNiNotification","file":"location/java/com/android/internal/location/GpsNetInitiatedHandler.java"},"deprecated":false,"digest":{"length":1277,"function_hash":"302377075379807171900877036379394630397"},"id":"ASB-A-154319182-e3c9d1ac"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8b7811ce591b323549ce12e431a9f3c67a5372d9"],"severity":"High","spl":"2021-07-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-154319182.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-07-01"}]}],"versions":["9"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d541f6d85e9030c5e0e7372332854684d8a32916","target":{"file":"location/java/com/android/internal/location/GpsNetInitiatedHandler.java","function":"setNiNotification"},"deprecated":false,"digest":{"function_hash":"302377075379807171900877036379394630397","length":1277},"id":"ASB-A-154319182-b0f5a545","signature_type":"Function"},{"digest":{"line_hashes":["57141771402374943506444044509408161720","274057428375888562584514121329737596111","145652496039882957379333952445927871354","97688537567720862757721685389724416698","139122145963004324395830361507533857666","63231585868942792336342622950260358008","161165112668534886843417182007256599493","239705283513759286004433642441149429883","200995080633005232385177291793598987622","156393830719532173149198413257072590111","155738557280113600894787057299773183410","63999223285240360490227071946833483534","146296754870920387483584432745122437982"],"threshold":0.9},"id":"ASB-A-154319182-c677cb2c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d541f6d85e9030c5e0e7372332854684d8a32916","target":{"file":"location/java/com/android/internal/location/GpsNetInitiatedHandler.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d541f6d85e9030c5e0e7372332854684d8a32916"],"severity":"High","spl":"2021-07-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-154319182.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-07-01"}]}],"versions":["10"],"ecosystem_specific":{"severity":"High","spl":"2021-07-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["129112561176638373507985579653724453590","274057428375888562584514121329737596111","145652496039882957379333952445927871354","97688537567720862757721685389724416698","139122145963004324395830361507533857666","63231585868942792336342622950260358008","161165112668534886843417182007256599493","239705283513759286004433642441149429883","200995080633005232385177291793598987622","156393830719532173149198413257072590111","155738557280113600894787057299773183410","63999223285240360490227071946833483534","146296754870920387483584432745122437982"]},"id":"ASB-A-154319182-9f997a70","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2b313d61aed6d99cb2a3ac2dad6f7d3993d0b8ac","target":{"file":"location/java/com/android/internal/location/GpsNetInitiatedHandler.java"}},{"id":"ASB-A-154319182-b4010899","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2b313d61aed6d99cb2a3ac2dad6f7d3993d0b8ac","target":{"file":"location/java/com/android/internal/location/GpsNetInitiatedHandler.java","function":"setNiNotification"},"deprecated":false,"digest":{"length":1277,"function_hash":"302377075379807171900877036379394630397"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2b313d61aed6d99cb2a3ac2dad6f7d3993d0b8ac"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-154319182.json"}}],"schema_version":"1.9.0"}