CVE-2021-0400

2021-04-1318:25:36

google_android

www.cve.org

0.0004 Low

EPSS

Percentile

12.6%

JSON

In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due to improper input validation. This could lead to incorrect reporting of location data to emergency services with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-177561690

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-9 Android-10 Android-11"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2021-04-01

0.0004 Low

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2021-0400