Google Android vulnerabilities

CVE-2020-26597 [HIGH] CWE-20 CVE-2020-26597: An issue was discovered on LG mobile devices with Android OS 9.0 and 10 software. The Wi-Fi subsyste An issue was discovered on LG mobile devices with Android OS 9.0 and 10 software. The Wi-Fi subsystem has incorrect input validation, leading to a crash. The LG ID is LVE-SMP-200022 (October 2020).

CVE-2020-25059 [HIGH] CWE-20 CVE-2020-25059: An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A se An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A service crash may occur because of incorrect input validation. The LG ID is LVE-SMP-200013 (July 2020).

CVE-2020-26600 [HIGH] CVE-2020-26600: An issue was discovered on Samsung mobile devices with Q(10.0) software. Auto Hotspot allows attacke An issue was discovered on Samsung mobile devices with Q(10.0) software. Auto Hotspot allows attackers to obtain sensitive information. The Samsung ID is SVE-2020-17288 (October 2020).

CVE-2020-26604 [HIGH] CVE-2020-26604: An issue was discovered in SystemUI on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11 An issue was discovered in SystemUI on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. PendingIntent allows an unprivileged process to access contact numbers. The Samsung ID is SVE-2020-18467 (October 2020).

CVE-2020-26605 [HIGH] CWE-532 CVE-2020-26605: An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Exynos chipsets) softwar An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Exynos chipsets) software. They allow attackers to obtain sensitive information by reading a log. The Samsung ID is SVE-2020-18596 (October 2020).

CVE-2017-18643 [HIGH] CWE-200 CVE-2017-18643: An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. There is informat An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. There is information disclosure of the kbase_context address of a GPU memory node. The Samsung ID is SVE-2017-8907 (December 2017).

CVE-2018-21083 [HIGH] CWE-200 CVE-2018-21083: An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.0) (Exynos or Qualcom An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.0) (Exynos or Qualcomm chipsets) software. There is information disclosure (of a kernel address) via trustonic_tee. The Samsung ID is SVE-2017-11175 (February 2018).

CVE-2017-18688 [HIGH] CWE-125 CVE-2017-18688: An issue was discovered on Samsung mobile devices with L(5.1), M(6.0), and N(7.0) software. There is An issue was discovered on Samsung mobile devices with L(5.1), M(6.0), and N(7.0) software. There is an information disclosure (of memory locations outside a buffer) via /dev/dsm_ctrl_dev. The Samsung ID is SVE-2016-7340 (January 2017).

CVE-2020-10854 [HIGH] CVE-2020-10854: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Kernel An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Kernel stack addresses are leaked to userspace. The Samsung ID is SVE-2019-16161 (January 2020).

CVE-2020-28345 [HIGH] CWE-476 CVE-2020-28345: An issue was discovered on LG mobile devices with Android OS 10 software. The Wi-Fi subsystem may cr An issue was discovered on LG mobile devices with Android OS 10 software. The Wi-Fi subsystem may crash because of the lack of a NULL parameter check. The LG ID is LVE-SMP-200025 (November 2020).

CVE-2020-10833 [HIGH] CWE-306 CVE-2020-10833: An issue was discovered on Samsung mobile devices with Q(10.0) software. The DeX Lockscreen allows a An issue was discovered on Samsung mobile devices with Q(10.0) software. The DeX Lockscreen allows attackers to access the quick panel and notifications. The Samsung ID is SVE-2019-16532 (March 2020).

CVE-2019-20614 [HIGH] CWE-862 CVE-2019-20614: An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Allshare An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Allshare allows attackers to access sensitive information. The Samsung ID is SVE-2018-13453 (March 2019).

CVE-2020-26601 [HIGH] CVE-2020-26601: An issue was discovered in DirEncryptService on Samsung mobile devices with O(8.x), P(9.0), and Q(10 An issue was discovered in DirEncryptService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18034 (October 2020).

CVE-2020-12750 [HIGH] CVE-2020-12750: An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass Factor An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via SPEN. The Samsung ID is SVE-2020-17019 (May 2020).

CVE-2020-11874 [HIGH] CVE-2020-11874: An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. Attackers An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. Attackers can bypass Factory Reset Protection (FRP). The LG ID is LVE-SMP-200004 (March 2020).

CVE-2019-20570 [HIGH] CVE-2019-20570: An issue was discovered on Samsung mobile devices with P(9.0), O(8.0), and N(7.1) software. Attacker An issue was discovered on Samsung mobile devices with P(9.0), O(8.0), and N(7.1) software. Attackers can bypass Factory Reset Protection (FRP) via Smart Switch. The Samsung ID is SVE-2019-15138 (September 2019).

CVE-2019-20551 [HIGH] CVE-2019-20551: An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Attacker An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via a Class 0 Type Message. The Samsung ID is SVE-2019-14941 (October 2019).

CVE-2019-20552 [HIGH] CVE-2019-20552: An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can bypass Factory An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via an RCS call. The Samsung ID is SVE-2019-15035 (October 2019).

CVE-2020-25281 [HIGH] CVE-2020-25281: An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. A An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Applications with sensitive security settings (such as the package verifier application) mishandle unknown-source installations. The LG ID is LVE-SMP-190002 (September 2020).

CVE-2020-25064 [HIGH] CVE-2020-25064: An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Certain automated testing is mishandled. The LG ID is LVE-SMP-200019 (August 2020).