Skip to content
OpenAdvisories

Vendor

LG Electronics

24 known vulnerabilities.

4 results · Clear filters · Feed

  • Low 3.0

    Absolute path traversal attack on LG Signage

    This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.

  • Low 3.6

    Messaging - Gaining access to arbitrary content providers via QClipIntentReceiverActivity

    The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity. The attacker can abuse this functionality by lau…

  • Low 3.6

    Call management - Implicit activity intents disclose contact details and phone numbers

    he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as contact details and p…

  • Low 3.6

    Call management - Implicit intents disclose telephony data such as phone numbers, call states, contacts

    The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as ca…