PT-2020-10753 · Google · Android

Published 2020-04-17 · Updated 2021-07-21 · CVE-2019-20780

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 8.1

Description An issue was discovered where certain security settings related to package verification and acceptance from known sources are mishandled. This affects devices with Android OS versions 7.0 through 8.1.

Recommendations For Android OS versions 7.0 through 8.1, consider restricting package installation to only known sources as a temporary mitigation measure until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2019-20780

Affected Products

Android

References · 4

• https://osv.dev/vulnerability/CVE-2019-20780 · Vendor Advisory
• https://lgsecurity.lge.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20780 · Security Note
• https://t.me/cvenotify/2887 · Telegram Post