CVE-2020-25282

CRITICAL

LG Android 10 - Missing Authorization in lguicc Property Access

Title source: llm

Description

An issue was discovered on LG mobile devices with Android OS 10 software. The lguicc software (for the LG Universal Integrated Circuit Card) allows attackers to bypass intended access restrictions on property values. The LG ID is LVE-SMP-200020 (September 2020).

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://lgsecurity.lge.com/

Scores

CVSS v3 9.8

EPSS 0.0044

EPSS Percentile 35.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-862

Status published

Products (1)

google/android 10.0

Published Sep 11, 2020

Tracked Since Feb 18, 2026