CVE-2019-20776

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 8.1

Description The issue is caused by a buffer overflow in the dxhdcp2 component of the Android operating system on LG devices, which can lead to a denial of service. A trusted application in the Trusted Zone (TZ) can crash due to crafted input.

Recommendations For Android OS versions 7.0 through 8.1, consider restricting access to the dxhdcp2 component to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.