PT-2020-16061 · Google · Android

Published 2020-09-11 · Updated 2020-09-17 · CVE-2020-25281

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 8.1

Description An issue was discovered where applications with sensitive security settings, such as the package verifier application, mishandle unknown-source installations.

Recommendations For Android OS versions 7.0 through 8.1, consider restricting the installation of applications from unknown sources to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2020-25281

Affected Products

Android

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-25281 · Security Note
• https://lgsecurity.lge.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25281 · Vendor Advisory