CVSS: 6.8EPSS: 0%CPEs: 2EXPL: 0CVE-2020-26964
https://notcve.org/view.php?id=CVE-2020-26964
If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could have connected to the feature and operated with the privileges of the browser to read and interact with web content. The feature was implemented as a unix domain socket, protected by the Android SELinux policy; however, SELinux was not enforced for versions prior to 6.0. This was fixed by removing the Remote Debugging via USB feature from affected devices. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. • https://bugzilla.mozilla.org/show_bug.cgi?id=1658865 https://www.mozilla.org/security/advisories/mfsa2020-50 •
CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 0CVE-2020-25064
https://notcve.org/view.php?id=CVE-2020-25064
An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Certain automated testing is mishandled. The LG ID is LVE-SMP-200019 (August 2020). Se detectó un problema en los dispositivos móviles LG con software de Sistema Operativo Android versiones 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0 y 10. Determinadas pruebas automatizadas se manejan inapropiadamente. • https://lgsecurity.lge.com •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2020-25065
https://notcve.org/view.php?id=CVE-2020-25065
An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Key logging may occur because of an obsolete API. The LG ID is LVE-SMP-170010 (August 2020). Se detectó un problema en los dispositivos móviles LG con software de Sistema Operativo Android versiones 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0 y 10. El registro de claves puede ocurrir debido a una API obsoleta. • https://lgsecurity.lge.com • CWE-203: Observable Discrepancy •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-13843
https://notcve.org/view.php?id=CVE-2020-13843
An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial of service because checking of the userdata partition is mishandled. The LG ID is LVE-SMP-200014 (June 2020). Se detectó un problema en los dispositivos móviles LG con software de Sistema Operativo Android antes del 01-06-2020. Los usuarios locales pueden causar una denegación de servicio porque la comprobación de la partición de los datos de usuario se maneja inapropiadamente. • https://lgsecurity.lge.com •
CVSS: 9.1EPSS: 0%CPEs: 17EXPL: 0CVE-2017-18648
https://notcve.org/view.php?id=CVE-2017-18648
An issue was discovered on Samsung mobile devices with KK(4.4.x), L(5.x), M(6.x), and N(7.x) software. Arbitrary file read/write operations can occur in the locked state via a crafted MTP command. The Samsung ID is SVE-2017-10086 (November 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4.x), L(5.x), M(6.x) y N(7.x). Las operaciones de lectura y escritura de archivos arbitrarios pueden ocurrir en el estado bloqueado por medio de un comando MTP diseñado. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •