Static GPS spoofing on Infotainment System

A vulnerability was identified in the GPS signal processing of the JXL Infotainment System, which relies on standard civilian GPS signals for location determination without performing sufficient validation or authenticity checks on the received data. Due to this lack of verification, an attacker in proximity can transmit forged GPS signals using a Software Defined Radio (SDR) device such as the HackRF One, mimicking legitimate satellite transmissions and overriding genuine signals. As a result, the infotainment system processes these spoofed inputs and computes an incorrect, attacker-controlled static location without detecting anomalies, leading to potential impacts such as inaccurate navigation, unintended geofencing behavior, and misuse of location-based functionalities, all without requiring direct access or authentication.