EUVD-2026-124719

Xiaomi Mi Browser Android Application com.mi.globalbrowser before 14.66.0-gn contains a path traversal vulnerability in the exported ThirdDocViewerActivity component, where CopyExternalFile.copyFromUri copies content provider streams using an unsanitized filename from the displayname column witho...