CVE-2020-12753
CRITICAL 9.8EPSS 2.5%
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Arbitrary code execution can occur via the bootloader because of an EL1/EL3 coldboot vulnerability involving raw_resources. The LG ID is LVE-SMP-200006 (May 2020).
- CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 2.47% chance of exploitation in the next 30 days, 83th percentile
- Published
- 2020-05-11
- Updated
- 2024-08-04
Proof-of-concept exploits (2)
- https://douevenknow.us/post/619763074822520832/an-el1el3-coldboot-vulnerability
- shinyquagsire23/CVE-2020-12753-PoC46★ · 2020-06-01