VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 4, 2021· Updated Jun 17, 2026

CVE-2021-26687

CVE-2021-26687

Description

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In preloaded applications, the HostnameVerified default is mishandled. The LG ID is LVE-SMP-200029 (February 2021).

Affected products

7
  • Google/Android4 versions
    cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*
  • LG/mobile devicesdescription
  • LG/Android OSllm-create
    Range: 8.0, 8.1, 9.0, and 10
  • LG/mobile devicesllm-fuzzy
    Range: 8.0, 8.1, 9.0, and 10

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.