CVE-2020-9530 - An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices

Back Back to CVE browser

MEDIUM

An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices

Published Mar 6, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 1.48%

Description

An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetApps(com.xiaomi.mipicks) mishandles the functionality of opening other components. Attackers need to induce users to open specific web pages in a specific network environment. By jumping to the WebView component of Messaging(com.android.MMS) and loading malicious web pages, information leakage can occur. This is fixed on version: 2001122; 11.0.1.54.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30336
Advisory
https://sec.xiaomi.com/post/180
x_refsource_MISCVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-289/
x_refsource_MISCThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30336		Advisory
https://sec.xiaomi.com/post/180		x_refsource_MISCVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-289/		x_refsource_MISCThird Party AdvisoryVDB Entry