PT-2020-13721 · Google+2 · Android+2

Published 2020-06-04 · Updated 2020-06-11 · CVE-2020-13840

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets)

Description An issue was discovered that allows code execution via an MTK AT command handler buffer overflow.

Recommendations For LG mobile devices with Android OS versions 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets), at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-13840

Affected Products

Android

Lg Mobile Devices

Mtk

References · 3

• https://osv.dev/vulnerability/CVE-2020-13840 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13840 · Security Note
• https://lgsecurity.lge.com · Vendor Advisory