PT-2020-15919 · Google · Android

Published 2020-08-31 · Updated 2020-09-01 · CVE-2020-25059

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.2, 8.0, 8.1, 9, and 10

Description An issue was discovered that may cause a service crash due to incorrect input validation.

Recommendations For Android OS version 7.2, update the input validation mechanism to prevent service crashes. For Android OS version 8.0, update the input validation mechanism to prevent service crashes. For Android OS version 8.1, update the input validation mechanism to prevent service crashes. For Android OS version 9, update the input validation mechanism to prevent service crashes. For Android OS version 10, update the input validation mechanism to prevent service crashes.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2020-25059

Affected Products

Android

References · 3

• https://osv.dev/vulnerability/CVE-2020-25059 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25059 · Security Note
• https://lgsecurity.lge.com · Vendor Advisory