An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Arbitrary code execution can occur via the bootloader because of an EL1/EL3 coldboot vulnerability involving raw_resources. The LG ID is LVE-SMP-200006 (May 2020).
References
| Link | Resource |
|---|---|
| https://douevenknow.us/post/619763074822520832/an-el1el3-coldboot-vulnerability | Exploit Third Party Advisory |
| https://lgsecurity.lge.com/ | Vendor Advisory |
| https://www.zdnet.com/article/new-cold-boot-attack-affects-seven-years-of-lg-android-smartphones/ | Press/Media Coverage Third Party Advisory |
| https://douevenknow.us/post/619763074822520832/an-el1el3-coldboot-vulnerability | Exploit Third Party Advisory |
| https://lgsecurity.lge.com/ | Vendor Advisory |
| https://www.zdnet.com/article/new-cold-boot-attack-affects-seven-years-of-lg-android-smartphones/ | Press/Media Coverage Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:00
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://douevenknow.us/post/619763074822520832/an-el1el3-coldboot-vulnerability - Exploit, Third Party Advisory | |
| References | () https://lgsecurity.lge.com/ - Vendor Advisory | |
| References | () https://www.zdnet.com/article/new-cold-boot-attack-affects-seven-years-of-lg-android-smartphones/ - Press/Media Coverage, Third Party Advisory |
Information
Published : 2020-05-11 16:15
Updated : 2024-11-21 05:00
NVD link : CVE-2020-12753
Mitre link : CVE-2020-12753
CVE.ORG link : CVE-2020-12753
JSON object : View
Products Affected
- android
CWE
CWE-787
Out-of-bounds Write