CVE-2020-25065

HIGH

LG Android OS 4.4-10 - Key Logging via Obsolete API

Title source: llm
STIX 2.1

Description

An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Key logging may occur because of an obsolete API. The LG ID is LVE-SMP-170010 (August 2020).

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://lgsecurity.lge.com/

Scores

CVSS v3 7.5
EPSS 0.0049
EPSS Percentile 38.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-203
Status published
Products (10)
google/android 4.4
google/android 5.0
google/android 5.1
google/android 6.0
google/android 7.0
google/android 7.1.0
google/android 8.0
google/android 8.1
google/android 9.0
google/android 10.0
Published Aug 31, 2020
Tracked Since Feb 18, 2026