PT-2020-16987 · Lg+1 · Lg Mobile Devices+1

Published 2020-11-08 · Updated 2020-11-16 · CVE-2020-28344

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software.

Description An issue was discovered where system services may crash due to the lack of a NULL parameter check.

Recommendations For Android OS 8.0, consider applying configuration changes to mitigate the risk of system service crashes. For Android OS 8.1, restrict access to system services to minimize the risk of exploitation. For Android OS 9.0, avoid using parameters that may cause system services to crash until the issue is resolved. For Android OS 10, as a temporary workaround, consider disabling system services that may be affected by the lack of a NULL parameter check until a patch is available.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2020-28344

Affected Products

Android Os

Lg Mobile Devices

References · 4

• https://osv.dev/vulnerability/CVE-2020-28344 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-28344 · Security Note
• https://lgsecurity.lge.com · Vendor Advisory
• https://t.me/cvenotify/5345 · Telegram Post