Skip to content
Not rated

CVE-2021-0400 In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting…

Description

In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due to improper input validation. This could lead to incorrect reporting of location data to emergency services with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-177561690

Affected products and versions

Product Affected versions Fixed in
Android Versions not published
The 2441 CVEs of Android →
Track this CVE