PT-2020-10750 · Qualcomm+2 · Qualcomm Sm6150+5

Published 2020-04-17 · Updated 2021-07-21 · CVE-2019-20775

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS 9.0

Description An issue was discovered that leads to local information disclosure due to weak encryption. The affected devices are LG mobile devices with Android OS 9.0, specifically those with Qualcomm SDM450, SDM845, SM6150, and SM8150 chipsets.

Recommendations For LG mobile devices with Android OS 9.0, consider updating the software to a version that addresses the weak encryption issue, as no specific fix is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2019-20775

Affected Products

Android Os

Lg Mobile Devices

Qualcomm Sd 450

Qualcomm Sd 845

Qualcomm Sm6150

Qualcomm Sm8150

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-20775 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20775 · Vendor Advisory
• https://lgsecurity.lge.com · Vendor Advisory
• https://t.me/cvenotify/2882 · Telegram Post