CVE-2020-11873

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A stack-based buffer overflow in the logging tool could allow an attacker to gain privileges. The LG ID is LVE-SMP-200005 April 2020...

CVE-2019-20771

CVE-2019-20771 affects LG mobile devices running Android 7.x–9.x. The WapService component is vulnerable to unconfirmed configuration changes via a modified OMACP message, enabling change of device configuration without user confirmation. Root cause: unverified OMACP processing in WapService (LG ...

CVE-2019-20771

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. WapService allows unconfirmed configuration changes via a modified OMACP message. The LG ID is LVE-SMP-190006 August 2019...

PT-2020-10751

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 9.0 Description An issue was discovered where the Backup subsystem does not properly restrict operations or validate their input. Recommendations For Android OS versions 7.0 through 9.0,...

PT-2020-10749

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 9.0 Description An issue allows local retrieval of the user's password through a system service. Recommendations For Android OS versions 7.0 through 9.0, consider restricting access to the...

CVE-2019-20773: Undefined Security Weakness

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. Unprivileged applications can execute shell commands via the connectivity service. The LG ID is LVE-SMP-190008 August 2019...

CVE-2019-20772: Undefined Security Weakness

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. The Account subsystem allows authorization bypass. The LG ID is LVE-SMP-190007 August 2019...

CVE-2019-20778: Improper Input Validation

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. The Backup subsystem does not properly restrict operations or validate their input. The LG ID is LVE-SMP-190004 June 2019...

CVE-2019-20775: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered on LG mobile devices with Android OS 9.0 Qualcomm SDM450, SDM845, SM6150, and SM8150 chipsets software. Weak encryption leads to local information disclosure. The LG ID is LVE-SMP-190010 August 2019...

CVE-2019-20774: Undefined Security Weakness

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. A system service allows local retrieval of the user's password. The LG ID is LVE-SMP-190009 August 2019...

CVE-2020-11873: Out-of-bounds Write

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A stack-based buffer overflow in the logging tool could allow an attacker to gain privileges. The LG ID is LVE-SMP-200005 April 2020...

PT-2020-10755

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 8.1 Description An issue was discovered in LG Advanced Flash LAF that results in a buffer overflow. This issue affects LG mobile devices running Android OS versions 7.0 through 8.1...

PT-2020-10746

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 9.0 Description An issue allows unconfirmed configuration changes via a modified OMACP message through the WapService. Recommendations For Android OS versions 7.0 through 9.0, consider...

PT-2020-12910 · Google +2 · Android +2

Name of the Vulnerable Software and Affected Versions: LG mobile devices with Android OS versions 8.0 through 10.0 Description: An issue was discovered that allows an attacker to gain privileges due to improper exception handling in the MTK kernel. Recommendations: For Android OS versions 8.0...

PT-2020-12909

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 8.0 through 10 Description An issue allows attackers to bypass Factory Reset Protection FRP on the affected devices. Recommendations For Android OS versions 8.0 through 10, consider implementing...

PT-2020-10747

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 9.0 Description An issue in the Account subsystem allows authorization bypass. This affects LG mobile devices running Android OS versions 7.0 through 9.0. Recommendations For Android OS...

PT-2020-10750

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS 9.0 Description An issue was discovered that leads to local information disclosure due to weak encryption. The affected devices are LG mobile devices with Android OS 9.0, specifically those with Qualcomm SDM45...

CVE-2019-20783: Undefined Security Weakness

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 North America CDMA software. The LTE protocol implementation allows a bypass of AKA Authentication and Key Agreement. The LG ID is LVE-SMP-180014 February 2019...

PT-2020-10756

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 8.1 Description An issue was discovered in the LTE protocol implementation, allowing a bypass of AKA Authentication and Key Agreement. Recommendations For Android OS versions 7.0 through...

CVE-2019-20782: Buffer Copy without Checking Size of Input

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. LG Advanced Flash LAF has a buffer overflow. The LG ID is LVE-SMP-190001 March 2019...