{"id":"CVE-2019-20773","aliases":["EUVD-2019-11312","GHSA-89xq-595m-2wqw"],"status":"published","title":"An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0...","description":"An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. Unprivileged applications can execute shell commands via the connectivity service. The LG ID is LVE-SMP-190008 (August 2019).","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00145,"percentile":0.03812,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-74"],"published":"2020-04-17T13:36:26Z","modified":"2026-06-17T02:31:10Z","products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://lgsecurity.lge.com/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20773"},{"url":"https://github.com/advisories/GHSA-89xq-595m-2wqw"}],"sources":{"cve":[{"id":"CVE-2019-20773","description":"An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. Unprivileged applications can execute shell commands via the connectivity service. The LG ID is LVE-SMP-190008 (August 2019).","status":"published","published":"2020-04-17T13:36:26Z","modified":"2024-08-05T02:53:09.228Z","updated_at":"2026-11-02T14:20:17.431882Z"}],"euvd":[{"id":"EUVD-2019-11312","description":"An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. Unprivileged applications can execute shell commands via the connectivity service. The LG ID is LVE-SMP-190008 (August 2019).","status":"published","published":"2020-04-17T13:36:26Z","modified":"2024-08-05T02:53:09Z","updated_at":"2026-11-03T02:40:20.727542Z"}],"ghsa":[{"id":"GHSA-89xq-595m-2wqw","title":"An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0...","description":"An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. Unprivileged applications can execute shell commands via the connectivity service. The LG ID is LVE-SMP-190008 (August 2019).","status":"published","published":"2022-05-24T17:15:39Z","modified":"2023-01-29T05:02:22Z","cwes":["CWE-74"],"updated_at":"2026-11-02T14:45:03.903455Z"}],"nvd":[{"id":"CVE-2019-20773","description":"An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. Unprivileged applications can execute shell commands via the connectivity service. The LG ID is LVE-SMP-190008 (August 2019).","status":"published","published":"2020-04-17T14:15:15.067Z","modified":"2026-06-17T02:31:10.143Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:05:46.451008Z"}]}}