PT-2020-10751 · Google · Android

Published 2020-04-17 · Updated 2020-04-22 · CVE-2019-20778

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 9.0

Description An issue was discovered where the Backup subsystem does not properly restrict operations or validate their input.

Recommendations For Android OS versions 7.0 through 9.0, consider restricting access to the Backup subsystem until a proper fix is applied. As a temporary workaround, avoid using the Backup subsystem to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2019-20778

Affected Products

Android

References · 4

• https://lgsecurity.lge.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-20778 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20778 · Security Note
• https://t.me/cvenotify/2885 · Telegram Post