CVE-2020-28345: NULL Pointer Dereference

An issue was discovered on LG mobile devices with Android OS 10 software. The Wi-Fi subsystem may crash because of the lack of a NULL parameter check. The LG ID is LVE-SMP-200025 November 2020...

CVE-2020-28344: NULL Pointer Dereference

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. System services may crash because of the lack of a NULL parameter check. The LG ID is LVE-SMP-200024 November 2020...

Code injection

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, and 9.0 software. The Network Management component could allow an unauthorized actor to kill a TCP connection. The LG ID is LVE-SMP-200023 October 2020...

CVE-2020-26597

The CVE-2020-26597 entry concerns LG mobile devices running Android 9.0–10, where the Wi‑Fi subsystem has an incorrect input validation that leads to a crash. The issue is tied to LG’s internal ID LVE-SMP-200022 (October 2020). Affected component: Wi‑Fi stack on affected LG devices; root cause st...

CVE-2020-26598

CVE-2020-26598 affects LG mobile devices running Android 8.0–9.0, with the issue in the Network Management component. The root cause is described as a vulnerability that could allow an unauthorized actor to terminate (kill) an established TCP connection. CVSS metrics indicate a network vector wit...

CVE-2020-26598

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, and 9.0 software. The Network Management component could allow an unauthorized actor to kill a TCP connection. The LG ID is LVE-SMP-200023 October 2020...

CVE-2020-26597: Improper Input Validation

An issue was discovered on LG mobile devices with Android OS 9.0 and 10 software. The Wi-Fi subsystem has incorrect input validation, leading to a crash. The LG ID is LVE-SMP-200022 October 2020...

CVE-2020-26598: Missing Authorization

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, and 9.0 software. The Network Management component could allow an unauthorized actor to kill a TCP connection. The LG ID is LVE-SMP-200023 October 2020...

CVE-2020-25281

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Applications with sensitive security settings such as the package verifier application mishandle unknown-source installations. The LG ID is LVE-SMP-190002 September 2020...

Design/Logic Flaw

An issue was discovered on LG mobile devices with Android OS 10 software. The lguicc software for the LG Universal Integrated Circuit Card allows attackers to bypass intended access restrictions on property values. The LG ID is LVE-SMP-200020 September 2020...

CVE-2020-25281

The CVE-2020-25281 entry concerns LG mobile devices running Android 7.x–8.1 where apps with sensitive security settings (e.g., the package verifier) mishandle unknown-source installations. Affected component/function relates to the installation pipeline for unknown sources. Underlying impact stat...

CVE-2020-25281

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Applications with sensitive security settings such as the package verifier application mishandle unknown-source installations. The LG ID is LVE-SMP-190002 September 2020...

CVE-2020-25282

An issue was discovered on LG mobile devices with Android OS 10 software. The lguicc software for the LG Universal Integrated Circuit Card allows attackers to bypass intended access restrictions on property values. The LG ID is LVE-SMP-200020 September 2020...

PT-2020-16063

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 8.0 through 10 Description An issue was discovered that allows attackers to bypass intended access restrictions on a certain mode through the BT manager. Recommendations For Android OS versions 8.0...

PT-2020-16062

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS 10 software Description An issue was discovered that allows attackers to bypass intended access restrictions on property values. This is related to the lguicc software, which is used for the LG Universal...

CVE-2020-25283: Missing Authorization

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. BT manager allows attackers to bypass intended access restrictions on a certain mode. The LG ID is LVE-SMP-200021 September 2020...

CVE-2020-25282: Missing Authorization

An issue was discovered on LG mobile devices with Android OS 10 software. The lguicc software for the LG Universal Integrated Circuit Card allows attackers to bypass intended access restrictions on property values. The LG ID is LVE-SMP-200020 September 2020...

CVE-2020-25281: Undefined Security Weakness

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Applications with sensitive security settings such as the package verifier application mishandle unknown-source installations. The LG ID is LVE-SMP-190002 September 2020...

PT-2020-16061

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 8.1 Description An issue was discovered where applications with sensitive security settings, such as the package verifier application, mishandle unknown-source installations. Recommendatio...

CVE-2020-25058

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. The networkmanagement service does not properly restrict configuration changes. The LG ID is LVE-SMP-200012 July 2020...