{"id":"ASB-A-177561690","details":"In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due to improper input validation. This could lead to incorrect reporting of location data to emergency services with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-177561690","CVE-2021-0400"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/95602e325ae1ee9cf383db38cb0a8d47567618dc"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-04-01"}]}],"versions":["9"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/579b74d5cbb08b8dd3461f484cdebcbd9e64c656","target":{"file":"services/core/java/com/android/server/location/GnssLocationProvider.java","function":"handleUpdateLocation"},"deprecated":false,"digest":{"function_hash":"281177864577035610064103641308514956885","length":148},"id":"ASB-A-177561690-2da51732"},{"id":"ASB-A-177561690-7bd06ed7","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/579b74d5cbb08b8dd3461f484cdebcbd9e64c656","target":{"file":"services/core/java/com/android/server/location/GnssLocationProvider.java"},"deprecated":false,"digest":{"line_hashes":["257757970397882978073075761855931332674","79671540842942165796507493259390264481","17592790157259100566252929660173604132","60577984668212041363010518837147285755","163619473527643612292974234204187349793","89135679412966756822938004620278974713","2611475514712806146582139879647525261","222912424006289734928092950474953386594"],"threshold":0.9}},{"digest":{"function_hash":"26997292164509738480091834412491593945","length":914},"id":"ASB-A-177561690-d70e7dee","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/579b74d5cbb08b8dd3461f484cdebcbd9e64c656","target":{"file":"services/core/java/com/android/server/location/GnssLocationProvider.java","function":"injectBestLocation"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/579b74d5cbb08b8dd3461f484cdebcbd9e64c656"],"severity":"High","spl":"2021-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-177561690.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-04-01"}]}],"versions":["10"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"target":{"function":"handleUpdateLocation","file":"services/core/java/com/android/server/location/GnssLocationProvider.java"},"deprecated":false,"digest":{"function_hash":"140260039340534588354822541116292943023","length":219},"id":"ASB-A-177561690-00da9456","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c59cbd13f62586bf1eaeb75767859ed08f3adeb1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/c59cbd13f62586bf1eaeb75767859ed08f3adeb1","target":{"file":"services/core/java/com/android/server/location/GnssLocationProvider.java"},"deprecated":false,"digest":{"line_hashes":["257757970397882978073075761855931332674","212930901082601694011779906740333081190","15339551320205961031815097056454159374","303901538576778438959015725729801495819","163619473527643612292974234204187349793","89135679412966756822938004620278974713","198395490762439878478707754843082150451","35853744024539631520651606170416991408"],"threshold":0.9},"id":"ASB-A-177561690-66743a2b","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/c59cbd13f62586bf1eaeb75767859ed08f3adeb1","target":{"function":"injectBestLocation","file":"services/core/java/com/android/server/location/GnssLocationProvider.java"},"deprecated":false,"digest":{"function_hash":"104977619292184249797167077362633210140","length":1199},"id":"ASB-A-177561690-a9f80a8c","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c59cbd13f62586bf1eaeb75767859ed08f3adeb1"],"severity":"High","spl":"2021-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-177561690.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-04-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e8212659b95b8a68ce32a82d8548d88aaeb4608a","target":{"file":"services/core/java/com/android/server/location/gnss/GnssLocationProvider.java","function":"injectLocation"},"deprecated":false,"digest":{"length":219,"function_hash":"140260039340534588354822541116292943023"},"id":"ASB-A-177561690-23611178","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e8212659b95b8a68ce32a82d8548d88aaeb4608a","target":{"file":"services/core/java/com/android/server/location/gnss/GnssLocationProvider.java"},"deprecated":false,"digest":{"line_hashes":["257757970397882978073075761855931332674","212930901082601694011779906740333081190","15339551320205961031815097056454159374","303901538576778438959015725729801495819","331198286719909576332180223253389574950","221553241774006473985829700771215306402","102684752914688777506994293548748871684","127744199569913252102156907612769223972"],"threshold":0.9},"id":"ASB-A-177561690-854db752","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e8212659b95b8a68ce32a82d8548d88aaeb4608a","target":{"file":"services/core/java/com/android/server/location/gnss/GnssLocationProvider.java","function":"injectBestLocation"},"deprecated":false,"digest":{"function_hash":"104977619292184249797167077362633210140","length":1199},"id":"ASB-A-177561690-f7034bfe","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e8212659b95b8a68ce32a82d8548d88aaeb4608a"],"severity":"High","spl":"2021-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-177561690.json"}}],"schema_version":"1.9.0"}