CVE-2021-0400

In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due…

published April 13, 2021

CVSS
—
EPSS
0%
Percentile
2.3
In the wild
Unconfirmed
What it is

In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due to improper input validation. This could lead to incorrect reporting of location data to emergency services with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-177561690

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00129 · 2.3th percentile
Published
2021-04-13T18:25Z
EPSS history
Timeline
  • 13 APR 18:25Z
    In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due…
    cvelistv5