CVE-2019-20772: Critical severity android vulnerability

Published Apr 17, 2020

Updated

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. The Account subsystem allows authorization bypass. The LG ID is LVE-SMP-190007 (August 2019).

Affected Software

6 affected components

Google Android=7.0

Google Android=7.1

Google Android=7.2

Google Android=8.0

Google Android=8.1

Google Android=9.0

Event History

Apr 17, 2020

CVE Published

via MITRE·01:35 PM

Data Sourced

via MITRE·01:35 PM

Description

Frequently Asked Questions

What is the severity of CVE-2019-20772?

CVE-2019-20772 has been classified as a high severity vulnerability due to its potential for authorization bypass.

How does CVE-2019-20772 affect LG mobile devices?

CVE-2019-20772 affects LG mobile devices running Android OS versions 7.0 through 9.0, allowing unauthorized access through the Account subsystem.

How do I fix CVE-2019-20772?

To fix CVE-2019-20772, users should update their LG mobile devices to the latest available software version released by LG.

Is there a workaround for CVE-2019-20772?

Currently, there are no specific workarounds available for CVE-2019-20772; updating the software is the recommended course of action.

What is the impact of CVE-2019-20772 on user accounts?

CVE-2019-20772 may lead to unauthorized access to user accounts, compromising sensitive personal information.