LG

LG is affected by vulnerabilities that affect all Android manufacturers in addition to those listed below.

LG has a FUM score of 4.53.

LG Lit

(json)

CVE numbers:
Coordinated disclosure?: true
Categories: kernel
Details: Bug in LG backlight driver allows gaining root from local user [androidforums-lit][archived]
Discovered by: giantpune [giantpune-email0] on: 2012-10-31 [giantpune-email0]
Reported on: 2012-10-25 [androidforums-lit][archived]
Fixed on: Unknown
Fix released on: Unknown
Affected versions: regex:
Affected devices: LG LM3530 backlight driver devices [androidforums-lit][archived], L38C [androidforums-lit-package][archived]
Affected manufacturers: LG [androidforums-lit][archived]
Fixed versions:
Submission: by: giantpune, on: 2014-10-17

libperf_event

(json)

CVE numbers: CVE-2013-2094 [cve-mitre-libperf-event]
Coordinated disclosure?: false
Categories: kernel
Details: The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call. [cve-mitre-libperf-event]
Discovered by: Hiroyuki Ikezoe [android-paper] on: Unknown
Reported on: Unknown
Fixed on: 2013-04-25 [linux-3-8-9-launchpad]
Fix released on: Unknown
Affected versions: 4.0 to 4.3.1 [android-paper] regex: (4.[0-2].[0-9])|(4.3.[0-1])
Affected devices: Nexus 4, and some Japanese models from HTC, Fujitsu, Sharp, Sony and LG models [android-paper]
Affected manufacturers: HTC [android-paper], Fujitsu [android-paper], Sharp [android-paper], Sony [android-paper], LG [android-paper]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-08

LG Sprite backup

(json)

CVE numbers: CVE-2013-3685 [citation-needed]
Coordinated disclosure?: true
Categories: system
Details: Race condition in Sprite Software's backup software, installed by OEM on LG Android devices. [fulldisclosure-2013-06-196]
Discovered by: Justin Case jcase@cunninglogic.com [fulldisclosure-2013-06-196] on: 2013-06-24 [fulldisclosure-2013-06-196]
Reported on: 2013-06-24 [fulldisclosure-2013-06-196]
Fixed on: Unknown
Fix released on: Unknown
Affected versions: spritebud 1.3.24, 1.3.28 backup 2.5.4105, 2.5.4108 [citation-needed] regex:
Affected devices: (LG-E971:LG Optimus G, LG-E973:LG Optimus G, LG-E975:LG Optimus G, LG-E975K:LG Optimus G, LG-E975T:LG Optimus G, LG-E976:LG Optimus G, LG-E977:LG Optimus G, LG-F100K:LG Optimus Vu, LG-F100L:LG Optimus Vu, LG-F100S:LG Optimus Vu, LG-F120K:LG Optimus Vu, LG-F120L:LG Optimus LTE Tag, LG-F120S:LG Optimus LTE Tag, LG-F160K:LG Optimus LTE 2, LG-F160L:LG Optimus LTE 2, LG-F160LV:LG Optimus LTE 2, LG-F160S:LG Optimus LTE 2, LG-F180K:LG Optimus G, LG-F180L:LG Optimus G, LG-F180S:LG Optimus G, LG-F200K:LG Optimus Vu 2, LG-F200L:LG Optimus Vu 2, LG-F200S:LG Optimus Vu 2, LG-F240K:LG Optimus G Pro, LG-F240L:LG Optimus G Pro, LG-F240S:LG Optimus G Pro, LG-F260K:LG Optimus LTE 3, LG-F260L:LG Optimus LTE 3, LG-F260S:LG Optimus LTE 3, LG-L21:LG Optimus G, LG-LG870:LG (Unknown), LG-LS860:LG Mach, LG-LS970:LG Optimus G, LG-P760:LG Optimus L9, LG-P769:LG Optimus L9, LG-P780:LG Optimus L7, LG-P875:LG Optimus F5, LG-P875h:LG Optimus F5, LG-P880:LG Optimus 4X HD, LG-P940:LG Prada, LG-SU540:LG Prada 3.0, LG-SU870:LG Optimus 3D Cube, LG-US780:LG Lollipop) [fulldisclosure-2013-06-196]
Affected manufacturers: LG [citation-needed]
Fixed versions:
Submission: by: Daniel R. Thomas, on: 2013-08-28; by: Justin Case, on: 2014-02-08

StumpRoot

(json)

CVE numbers:
Coordinated disclosure?: false
Categories:
Details: Vulnerability affecting LG devices released between 2012 and 2014 [xda-developers-stumproot]
Discovered by: thecubed [xda-developers-stumproot] on: Unknown
Reported on: 2014-08-17 [xda-developers-stumproot]
Fixed on: Unknown
Fix released on: Unknown
Affected versions: regex:
Affected devices: Verizon LG G3, T-Mobile LG G3, AT&T LG G3, Sprint LG G3, D852G Videotron 10C, D852 Rogers 10B, D852 Bell 10B, Flex D959 TMobile, LG-D855, LG-D858, LG-D855, LG-D851, LG-F400L [xda-developers-stumproot]
Affected manufacturers: LG [xda-developers-stumproot]
Fixed versions:
Submission: by: Daniel R. Thomas, on: 2016-03-18; by: Stephan Kollmann, on: 2015-10-14

Full TrustZone

(json)

CVE numbers:
Coordinated disclosure?: true
Categories: kernel, system
Details: A vulnerability in a modified kernel means that a series of exploits can be used to obtain access to the Trusted Execution Environment [msm8974-pt1][archived]
Discovered by: Gal Beniamini (laginimaineb) [msm8974-pt3][archived] on: Unknown
Reported on: 2014-09-19 [msm8974-pt3][archived]
Fixed on: 2014-10-01 [msm8974-pt3][archived]
Fix released on: Unknown
Affected versions: Crafted ROM based on 4.4.4 [msm8974-pt3][archived] regex: 4.4.4
Affected devices: All devices using the MSM8974 SoCMSM8974 SoC [msm8974-pt3][archived]
Affected manufacturers: Samsung [msm8974-pt3][archived], HTC [msm8974-pt3][archived], LG [msm8974-pt3][archived], Sony [msm8974-pt3][archived], OnePlus [msm8974-pt3][archived], Acer [msm8974-pt3][archived], Asus [msm8974-pt3][archived], Gionee [msm8974-pt3][archived], ZTE [msm8974-pt3][archived], Sharp [msm8974-pt3][archived], Pantech [msm8974-pt3][archived], Lenovo [msm8974-pt3][archived], Oppo [msm8974-pt3][archived], Vivo [msm8974-pt3][archived], IUNI [msm8974-pt3][archived], Hisense [msm8974-pt3][archived], Coolpad [msm8974-pt3][archived], Xiaomi [msm8974-pt3][archived], InFocus [msm8974-pt3][archived]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-09

Sensord local root

(json)

CVE numbers:
Coordinated disclosure?: false
Categories: system
Details: A vulnerability exploiting the sensord daemon, which runs as root on some devices [sensord-exploit-db]
Discovered by: s0m3b0dy [sensord-exploit-db] on: Unknown
Reported on: 2016-01-27 [sensord-exploit-db]
Fixed on: Unknown
Fix released on: Unknown
Affected versions: regex:
Affected devices: LG L7 and others [sensord-exploit-db]
Affected manufacturers: LG [sensord-exploit-db], Other devices using the sensord daemon [sensord-exploit-db]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-09

CVE-2018-9364

(json)

CVE numbers: CVE-2018-9364 [Bulletin-CVE-2018-9364]
Coordinated disclosure?: unknown
Categories: LG components
Details:
Discovered by: on: Unknown
Reported on: 2018-06-01 [Bulletin-CVE-2018-9364]
Fixed on: Unknown
Fix released on: 2018-06-05 [Bulletin-CVE-2018-9364]
Affected versions: regex:
Affected devices:
Affected manufacturers: LG [Bulletin-CVE-2018-9364]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-25