PT-2020-15920 · Google+1 · Android+1

Published 2020-08-31 · Updated 2021-07-21 · CVE-2020-25060

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.2, 8.0, 8.1, 9, and 10

Description An issue was discovered that allows local users to gain privileges due to LAF and SBL1 flaws.

Recommendations For Android OS version 7.2, update to a version that includes the fix for the LAF and SBL1 flaws. For Android OS version 8.0, update to a version that includes the fix for the LAF and SBL1 flaws. For Android OS version 8.1, update to a version that includes the fix for the LAF and SBL1 flaws. For Android OS version 9, update to a version that includes the fix for the LAF and SBL1 flaws. For Android OS version 10, update to a version that includes the fix for the LAF and SBL1 flaws.

Fix

Related Identifiers

CVE-2020-25060

Affected Products

Android

Lg Mobile Devices

References · 3

• https://osv.dev/vulnerability/CVE-2020-25060 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25060 · Security Note
• https://lgsecurity.lge.com · Vendor Advisory