CVE-2021-26687: Critical severity android vulnerability

Published Feb 4, 2021

Updated

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In preloaded applications, the HostnameVerified default is mishandled. The LG ID is LVE-SMP-200029 (February 2021).

Affected Software

4 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android=10.0

Event History

Feb 4, 2021

CVE Published

via MITRE·05:16 AM

Data Sourced

via MITRE·05:16 AM

Description

Frequently Asked Questions

What is the severity of CVE-2021-26687?

CVE-2021-26687 is classified as a moderate severity vulnerability due to its impact on the default handling of HostnameVerified in preloaded applications.

How do I fix CVE-2021-26687?

To fix CVE-2021-26687, ensure that your LG mobile device is updated with the latest security patches provided by LG.

What devices are affected by CVE-2021-26687?

CVE-2021-26687 affects LG mobile devices running Android OS versions 8.0, 8.1, 9.0, and 10.

What is the risk of CVE-2021-26687?

The risk associated with CVE-2021-26687 includes potential exploitation that could compromise application security on affected LG devices.

Who should be aware of CVE-2021-26687?

Developers and users of LG mobile devices running the affected versions of Android should be aware of CVE-2021-26687 to mitigate potential security risks.