CVE-2020-13840

Summary

CVE	CVE-2020-13840
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2020-06-05 00:15:00 UTC
Updated	2020-06-11 15:32:00 UTC
Description	An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via an MTK AT command handler buffer overflow. The LG ID is LVE-SMP-200008 (June 2020).

Risk And Classification

Problem Types: CWE-120

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Google	Android	10.0	All	All	All
Operating System	Google	Android	7.2	All	All	All
Operating System	Google	Android	8.0	All	All	All
Operating System	Google	Android	8.1	All	All	All
Operating System	Google	Android	9.0	All	All	All
Operating System	Google	Android	10.0	All	All	All
Operating System	Google	Android	7.2	All	All	All
Operating System	Google	Android	8.0	All	All	All
Operating System	Google	Android	8.1	All	All	All
Operating System	Google	Android	9.0	All	All	All
Hardware	Lg	Cv1	-	All	All	All
Hardware	Lg	Cv1	-	All	All	All
Hardware	Lg	Cv1s	-	All	All	All
Hardware	Lg	Cv1s	-	All	All	All
Hardware	Lg	Cv3	-	All	All	All
Hardware	Lg	Cv3	-	All	All	All
Hardware	Lg	Cv5	-	All	All	All
Hardware	Lg	Cv5	-	All	All	All
Hardware	Lg	Cv7	-	All	All	All
Hardware	Lg	Cv7	-	All	All	All
Hardware	Lg	Cv7as	-	All	All	All
Hardware	Lg	Cv7as	-	All	All	All
Hardware	Lg	Dh10	-	All	All	All
Hardware	Lg	Dh10	-	All	All	All
Hardware	Lg	Dh15	-	All	All	All
Hardware	Lg	Dh15	-	All	All	All
Hardware	Lg	Dh30	-	All	All	All
Hardware	Lg	Dh30	-	All	All	All
Hardware	Lg	Dh35	-	All	All	All
Hardware	Lg	Dh35	-	All	All	All
Hardware	Lg	Dh40	-	All	All	All
Hardware	Lg	Dh40	-	All	All	All
Hardware	Lg	Dh5	-	All	All	All
Hardware	Lg	Dh5	-	All	All	All
Hardware	Lg	Dh50	-	All	All	All
Hardware	Lg	Dh50	-	All	All	All
Hardware	Lg	G6	-	All	All	All
Hardware	Lg	G6	-	All	All	All
Hardware	Lg	G7	-	All	All	All
Hardware	Lg	G7	-	All	All	All
Hardware	Lg	G8	-	All	All	All
Hardware	Lg	G8	-	All	All	All
Hardware	Lg	K20	-	All	All	All
Hardware	Lg	K20	-	All	All	All
Hardware	Lg	K30	-	All	All	All
Hardware	Lg	K30	-	All	All	All
Hardware	Lg	K40	-	All	All	All
Hardware	Lg	K40	-	All	All	All
Hardware	Lg	K50	-	All	All	All
Hardware	Lg	K50	-	All	All	All
Hardware	Lg	Q6	-	All	All	All
Hardware	Lg	Q6	-	All	All	All
Hardware	Lg	Q60	-	All	All	All
Hardware	Lg	Q60	-	All	All	All
Hardware	Lg	Q70	-	All	All	All
Hardware	Lg	Q70	-	All	All	All
Hardware	Lg	Q8	-	All	All	All
Hardware	Lg	Q8	-	All	All	All
Hardware	Lg	V20	-	All	All	All
Hardware	Lg	V20	-	All	All	All
Hardware	Lg	V30	-	All	All	All
Hardware	Lg	V30	-	All	All	All
Hardware	Lg	V35	-	All	All	All
Hardware	Lg	V35	-	All	All	All
Hardware	Lg	V40	-	All	All	All
Hardware	Lg	V40	-	All	All	All
Hardware	Lg	V50	-	All	All	All
Hardware	Lg	V50	-	All	All	All
Hardware	Lg	V60	-	All	All	All
Hardware	Lg	V60	-	All	All	All
Hardware	Lg	X300	-	All	All	All
Hardware	Lg	X300	-	All	All	All
Hardware	Lg	X400	-	All	All	All
Hardware	Lg	X400	-	All	All	All
Hardware	Lg	X500	-	All	All	All
Hardware	Lg	X500	-	All	All	All
Hardware	Lg	X Cam	-	All	All	All
Hardware	Lg	X Cam	-	All	All	All

References

Reference	Source	Link	Tags
LG Product Security	CONFIRM	lgsecurity.lge.com	Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.