Certain LG devices based on Android 6.0 through 8.1 have incorrect access control for MLT application intents. The LG ID is LVE-SMP-180006.
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
Link | Tags |
---|---|
https://lgsecurity.lge.com/security_updates.html | third party advisory |
https://www.kryptowire.com/portal/android-firmware-defcon-2018/ | third party advisory |