PT-2019-6298 · Lg+1 · Lg Mobile Devices+1

Publicado 2019-01-30 · Atualizado 2021-07-21 · CVE-2019-20776

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 8.1

Description The issue is caused by a buffer overflow in the dxhdcp2 component of the Android operating system on LG devices, which can lead to a denial of service. A trusted application in the Trusted Zone (TZ) can crash due to crafted input.

Recommendations For Android OS versions 7.0 through 8.1, consider restricting access to the dxhdcp2 component to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2022-07428

CVE-2019-20776

Produtos afetados

Android

Lg Mobile Devices

Referências · 8

• https://osv.dev/vulnerability/CVE-2019-20776 · Aviso do Fabricante
• https://lgsecurity.lge.com · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-20776 · Nota de Segurança
• https://bdu.fstec.ru/vul/2022-07428 · Nota de Segurança
• https://securitylab.ru/news/502620.php · Nota
• https://source.android.com/docs/security/bulletin · Nota
• https://t.me/cvenotify/2883 · Publicação no Telegram
• https://cpr-zero.checkpoint.com/vulns/cprid-2170 · Nota