VULNERABILITY INTELLIGENCE
CVE-2019-20780
CVSS score9.8 CRITICAL
EPSS probability0.45%
CISA KEVNot currently listed
Published2020-04-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Certain security settings, related to whether packages are verified and accepted only from known sources, are mishandled. The LG ID is LVE-SMP-190002 (April 2019).
Weakness classification
- CWE-427: Uncontrolled Search Path Element
Primary references
- cve@mitre.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory