CVE-2021-0340
In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation.
Published Feb 1, 2021 · updated Oct 15, 2026
In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Feb 1, 2021 · OSV.dev
Detected
In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Oct 15, 2026 · OSV.dev
Fix available
platform/packages/providers/MediaProvider fixed in 10:2021-02-01; platform/packages/providers/MediaProvider fixed in 11:2021-02-01
Oct 15, 2026 · OSV.dev
Fix available
platform/packages/providers/MediaProvider fixed in 10:2021-02-01
Oct 15, 2026 · OSV.dev
Fix available
platform/packages/providers/MediaProvider fixed in 11:2021-02-01
Oct 15, 2026 · OSV.dev
Updated
In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Affected
- Android platform/packages/providers/MediaProvider10:0 → 10:2021-02-01
- Android platform/packages/providers/MediaProvider11:0 → 11:2021-02-01