CVE-2020-13840: Buffer Overflow

Published Jun 4, 2020
·
Updated

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via an MTK AT command handler buffer overflow. The LG ID is LVE-SMP-200008 (June 2020).

Affected Software

39 affected components
Google Android=7.2
Google Android=8.0
Google Android=8.1
Google Android=9.0
Google Android=10.0
LG Cv1
LG Cv1s
LG Cv3
LG Cv5
LG Cv7
LG Cv7as
LG Dh10
LG Dh15
LG Dh30
LG Dh35
LG Dh40
LG Dh5
LG Dh50
LG G6
LG G7
LG G8
LG K20
LG K30
LG K40
LG K50
LG Q6
LG Q60
LG Q70
LG Q8
LG V20
LG V30
LG V35
LG V40
LG V50
LG V60
LG X Cam
LG X300
LG X400
LG X500

Event History

Jun 4, 2020
CVE Published
via MITRE·11:24 PM
Data Sourced
via MITRE·11:24 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2020-13840?

CVE-2020-13840 is an issue discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets) where code execution can occur via an MTK AT command handler buffer overflow.

2

What is the severity of CVE-2020-13840?

CVE-2020-13840 has a severity rating of 9.8, which is considered critical.

3

Which LG mobile devices are affected by CVE-2020-13840?

LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets) are affected by CVE-2020-13840.

4

How can code execution occur in CVE-2020-13840?

Code execution can occur in CVE-2020-13840 through an MTK AT command handler buffer overflow.

5

Is there a fix available for CVE-2020-13840?

It is recommended to update your LG mobile device to the latest available Android OS version to mitigate the risk of code execution via an MTK AT command handler buffer overflow.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203