PT-2019-6298 · Lg+1 · Lg Mobile Devices+1

Published 2019-01-30 · Updated 2021-07-21 · CVE-2019-20776

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 8.1

Description The issue is caused by a buffer overflow in the dxhdcp2 component of the Android operating system on LG devices, which can lead to a denial of service. A trusted application in the Trusted Zone (TZ) can crash due to crafted input.

Recommendations For Android OS versions 7.0 through 8.1, consider restricting access to the dxhdcp2 component to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2022-07428

CVE-2019-20776

Affected Products

Android

Lg Mobile Devices

References · 8

• https://osv.dev/vulnerability/CVE-2019-20776 · Vendor Advisory
• https://lgsecurity.lge.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20776 · Security Note
• https://bdu.fstec.ru/vul/2022-07428 · Security Note
• https://securitylab.ru/news/502620.php · Note
• https://source.android.com/docs/security/bulletin · Note
• https://t.me/cvenotify/2883 · Telegram Post
• https://cpr-zero.checkpoint.com/vulns/cprid-2170 · Note