{"id":"ASB-A-196970023","details":"In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-196970023","CVE-2021-0970"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-12-01"}]}],"versions":["9"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/8bcd86e6626a38df525507cd25044cc9592b9b0d","target":{"file":"location/java/android/location/GpsNavigationMessage.java"},"signature_type":"Line","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["124025345072694331739214173039099576593","162778159953647138094938789303301591407","271619544187844072394449961820309288291","55935293887020478280648402898434146389","158717058656457652709433784362727591795","249890113988591899345578852558713682626","51694359095882752951811469354253459794","191102558873463797989262390257008705482","106327189159305073122011856448853079221"]},"id":"ASB-A-196970023-134e6f2b"},{"digest":{"function_hash":"86420969651292207696714084519346521043","length":550},"deprecated":false,"target":{"file":"location/java/android/location/GpsNavigationMessage.java","function":"createFromParcel"},"source":"https://android.googlesource.com/platform/frameworks/base/+/8bcd86e6626a38df525507cd25044cc9592b9b0d","signature_version":"v1","signature_type":"Function","id":"ASB-A-196970023-f9e28f9f"}],"spl":"2021-12-01","severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/8bcd86e6626a38df525507cd25044cc9592b9b0d"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-196970023.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-12-01"}]}],"versions":["10"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/a1b4297002b927ce0fc795c0ac1d45a6a200b43b","target":{"file":"location/java/android/location/GpsNavigationMessage.java","function":"createFromParcel"},"id":"ASB-A-196970023-7645c0e4","signature_version":"v1","digest":{"function_hash":"86420969651292207696714084519346521043","length":550},"signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/a1b4297002b927ce0fc795c0ac1d45a6a200b43b","digest":{"threshold":0.9,"line_hashes":["124025345072694331739214173039099576593","162778159953647138094938789303301591407","271619544187844072394449961820309288291","55935293887020478280648402898434146389","158717058656457652709433784362727591795","249890113988591899345578852558713682626","51694359095882752951811469354253459794","191102558873463797989262390257008705482","106327189159305073122011856448853079221"]},"target":{"file":"location/java/android/location/GpsNavigationMessage.java"},"deprecated":false,"signature_version":"v1","signature_type":"Line","id":"ASB-A-196970023-9e0ccb20"}],"spl":"2021-12-01","severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/a1b4297002b927ce0fc795c0ac1d45a6a200b43b"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-196970023.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-12-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["124025345072694331739214173039099576593","162778159953647138094938789303301591407","271619544187844072394449961820309288291","55935293887020478280648402898434146389","158717058656457652709433784362727591795","249890113988591899345578852558713682626","51694359095882752951811469354253459794","191102558873463797989262390257008705482","106327189159305073122011856448853079221"]},"deprecated":false,"target":{"file":"location/java/android/location/GpsNavigationMessage.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/1903539154df194722ce5f0dbbd38e18f8c1fc12","signature_version":"v1","signature_type":"Line","id":"ASB-A-196970023-9e894fc6"},{"digest":{"function_hash":"86420969651292207696714084519346521043","length":550},"deprecated":false,"target":{"file":"location/java/android/location/GpsNavigationMessage.java","function":"createFromParcel"},"source":"https://android.googlesource.com/platform/frameworks/base/+/1903539154df194722ce5f0dbbd38e18f8c1fc12","signature_version":"v1","signature_type":"Function","id":"ASB-A-196970023-a4b1cdc9"}],"spl":"2021-12-01","severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/1903539154df194722ce5f0dbbd38e18f8c1fc12"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-196970023.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-12-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/dca80fea22fc71b0a1fc2c26af8daa2a3b65f2f6","target":{"file":"location/java/android/location/GpsNavigationMessage.java"},"id":"ASB-A-196970023-172dd4e0","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["124025345072694331739214173039099576593","162778159953647138094938789303301591407","271619544187844072394449961820309288291","55935293887020478280648402898434146389","158717058656457652709433784362727591795","249890113988591899345578852558713682626","51694359095882752951811469354253459794","191102558873463797989262390257008705482","106327189159305073122011856448853079221"]},"signature_type":"Line"},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/dca80fea22fc71b0a1fc2c26af8daa2a3b65f2f6","target":{"file":"location/java/android/location/GpsNavigationMessage.java","function":"createFromParcel"},"signature_type":"Function","signature_version":"v1","digest":{"function_hash":"86420969651292207696714084519346521043","length":550},"id":"ASB-A-196970023-d8399d06"}],"spl":"2021-12-01","severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/dca80fea22fc71b0a1fc2c26af8daa2a3b65f2f6"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-196970023.json"}}],"schema_version":"1.7.5"}