PT-2021-17094 · Google+1 · Android+1

Published 2021-02-04 · Updated 2021-02-05 · CVE-2021-26689

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 8.0 through 10

Description An issue was discovered on LG mobile devices where the USB laf gadget has a use-after-free.

Recommendations For Android OS versions 8.0 through 10, consider disabling the USB laf gadget functionality until a patch is available.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2021-26689

Affected Products

Android

Lg Mobile Devices

References · 6

• https://lgsecurity.lge.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-26689 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26689 · Security Note
• https://t.me/cvenotify/9394 · Telegram Post
• https://t.me/cibsecurity/23045 · Telegram Post
• https://t.me/cvenotify/9388 · Telegram Post