PT-2020-10758 · Google+1 · Android+1

Published 2020-04-17 · Updated 2020-04-24 · CVE-2019-20785

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 8.0 and 8.1

Description An issue was discovered in the radio layer of LG mobile devices, where RILD uses an uninitialized variable.

Recommendations For Android OS version 8.0, update the software to a version that fixes the issue. For Android OS version 8.1, update the software to a version that fixes the issue. As a temporary workaround, consider restricting access to the radio layer until a patch is available.

Fix

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

CVE-2019-20785

Affected Products

Android

Lg Mobile Devices

References · 3

• https://osv.dev/vulnerability/CVE-2019-20785 · Vendor Advisory
• https://lgsecurity.lge.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20785 · Security Note