Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-13840

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via an MTK AT command handler buffer overflow. The LG ID is LVE-SMP-200008 (June 2020).

Published

2020-06-05T00:15:10.880

Last Modified

2024-11-21T05:01:58.710

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-120
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System google android 7.2 Yes
Operating System google android 8.0 Yes
Operating System google android 8.1 Yes
Operating System google android 9.0 Yes
Operating System google android 10.0 Yes
Hardware lg cv1 - No
Hardware lg cv1s - No
Hardware lg cv3 - No
Hardware lg cv5 - No
Hardware lg cv7 - No
Hardware lg cv7as - No
Hardware lg dh10 - No
Hardware lg dh15 - No
Hardware lg dh30 - No
Hardware lg dh35 - No
Hardware lg dh40 - No
Hardware lg dh5 - No
Hardware lg dh50 - No
Hardware lg g6 - No
Hardware lg g7 - No
Hardware lg g8 - No
Hardware lg k20 - No
Hardware lg k30 - No
Hardware lg k40 - No
Hardware lg k50 - No
Hardware lg q6 - No
Hardware lg q60 - No
Hardware lg q70 - No
Hardware lg q8 - No
Hardware lg v20 - No
Hardware lg v30 - No
Hardware lg v35 - No
Hardware lg v40 - No
Hardware lg v50 - No
Hardware lg v60 - No
Hardware lg x_cam - No
Hardware lg x300 - No
Hardware lg x400 - No
Hardware lg x500 - No
References