CVE-2019-20775 : An issue was discovered on LG mobile devices with Android OS 9.0 (Qualcomm SDM45

An issue was discovered on LG mobile devices with Android OS 9.0 (Qualcomm SDM450, SDM845, SM6150, and SM8150 chipsets) software. Weak encryption leads to local information disclosure. The LG ID is LVE-SMP-190010 (August 2019).

Published 2020-04-17 14:15:15

Updated 2021-07-21 11:39:24

Source MITRE

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2019-20775

Google » Android » Version: 9.0
cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sdm450 » Version: N/A
When used together with: Qualcomm » Sdm845 » Version: N/A
When used together with: Qualcomm » Sm6150 » Version: N/A
When used together with: Qualcomm » Sm8150 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-20775

EPSS FAQ

0.01%

Probability of exploitation activity in the next 30 days EPSS Score History

~ %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-20775

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2019-20775

CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2019-20775

https://lgsecurity.lge.com/

LG Product Security
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2019-20775

Products affected by CVE-2019-20775

Exploit prediction scoring system (EPSS) score for CVE-2019-20775

CVSS scores for CVE-2019-20775

CWE ids for CVE-2019-20775

References for CVE-2019-20775