CVE-2020-13840

CRITICAL

9.8

CVSS Score

Published: June 4, 2020 at 11:24 PM UTC

Updated: June 17, 2026 at 02:53 AM UTC

1 product affected across 1 vendorAndroid· also runs on 34 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

CRITICAL9.8

Exploit prediction

EPSS 0.7%

Description

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via an MTK AT command handler buffer overflow. The LG ID is LVE-SMP-200008 (June 2020).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Android · Google

95%

10.0 7.2 8.0 8.1 9.0

lg-cv1 (environment) · lg-cv1s (environment) · lg-cv3 (environment) · lg-cv5 (environment) · lg-cv7 (environment) · lg-cv7as (environment) · lg-dh10 (environment) · lg-dh15 (environment) · lg-dh30 (environment) · lg-dh35 (environment) · lg-dh40 (environment) · lg-dh5 (environment) · lg-dh50 (environment) · lg-g6 (environment) · lg-g7 (environment) · lg-g8 (environment) · lg-k20 (environment) · lg-k30 (environment) · lg-k40 (environment) · lg-k50 (environment) · lg-q6 (environment) · lg-q60 (environment) · lg-q70 (environment) · lg-q8 (environment) · lg-v20 (environment) · lg-v30 (environment) · lg-v35 (environment) · lg-v40 (environment) · lg-v50 (environment) · lg-v60 (environment) · lg-x-cam (environment) · lg-x300 (environment) · lg-x400 (environment) · lg-x500 (environment)