CVE-2020-13839

CRITICAL

9.8

Description

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via a custom AT command handler buffer overflow. The LG ID is LVE-SMP-200007 (June 2020).

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie6/5/2020

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

google:androidlg:cv1lg:cv1slg:cv3lg:cv5lg:cv7lg:cv7aslg:dh10lg:dh15lg:dh30lg:dh35lg:dh40lg:dh5lg:dh50lg:g6lg:g7lg:g8lg:k20lg:k30lg:k40lg:k50lg:q6lg:q60lg:q70lg:q8lg:v20lg:v30lg:v35lg:v40lg:v50lg:v60lg:x300lg:x400lg:x500lg:x_cam

Faiblesses (CWE)

CWE-120

References

https://lgsecurity.lge.com/(cve@mitre.org)

https://lgsecurity.lge.com/(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.