PT-2020-17347

CVE-2020-35554

·

Published

2020-12-18

·

Updated

2020-12-21

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 8.0 through 10
Description An issue was discovered on LG mobile devices, where there is a WebView SSL error-handler vulnerability.
Recommendations For Android OS versions 8.0 through 10, consider disabling the WebView SSL error-handler functionality until a patch is available. As a temporary workaround, restrict the use of WebView to minimize the risk of exploitation. Avoid using SSL error-handler functions in WebView until the issue is resolved.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾