CVE-2019-15469

The Xiaomi Mi Pad 4 Android device with a build fingerprint of Xiaomi/clover/clover:8.1.0/OPM1.171019.019/V9.6.26.0.ODJCNFD:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app versionCode=27, versionName=8.1.0 that allows other pre-installed...

CVE-2019-15473

The CVE-2019-15473 entry concerns the Xiaomi Mi A2 Lite (build jasmine_sprout:9; PKQ1.180904.001/V10.0.2.0.PDIMIFJ) which ships a pre-installed com.qualcomm.qti.callenhancement app. The issue allows unauthorized microphone audio recording via a confused deputy attack that can be triggered by any ...

CVE-2019-15471

The CVE-2019-15471 entry concerns a Xiaomi Mi Mix 2S device (build Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys) with a pre-installed com.qualcomm.qti.callenhancement app (versionCode=27, versionName=8.1.0) that enables other pre-installed apps to perform micro...

CVE-2019-15475: Externally Controlled Reference to a Resource in Another Sphere

The Xiaomi Mi A3 Android device with a build fingerprint of xiaomi/onceea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app versionCode=28, versionName=9 that allows unauthorized microphone audio...

CVE-2019-15473: Externally Controlled Reference to a Resource in Another Sphere

The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/jasmine/jasminesprout:9/PKQ1.180904.001/V10.0.2.0.PDIMIFJ:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app versionCode=28, versionName=9 that allows unauthorized...

CVE-2019-15471: Undefined Security Weakness

The Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app versionCode=27, versionName=8.1.0 that allows other pre-install...

PT-2019-14200

Name of the Vulnerable Software and Affected Versions Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys com.qualcomm.qti.callenhancement app version 8.1.0 Description The issue allows pre-installed apps wit...

PT-2019-14198

Name of the Vulnerable Software and Affected Versions Xiaomi Mi Pad 4 Android device with a build fingerprint of Xiaomi/clover/clover:8.1.0/OPM1.171019.019/V9.6.26.0.ODJCNFD:user/release-keys com.qualcomm.qti.callenhancement app version 8.1.0 Description The issue allows other pre-installed apps ...

PT-2019-14201

Name of the Vulnerable Software and Affected Versions Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisy sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys com.qualcomm.qti.callenhancement app version 9 versionCode=28 Description The issue allows unauthorize...

PT-2019-14202

Name of the Vulnerable Software and Affected Versions Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/jasmine/jasmine sprout:9/PKQ1.180904.001/V10.0.2.0.PDIMIFJ:user/release-keys com.qualcomm.qti.callenhancement app version 9 versionCode=28 Description The issue allows...

PT-2019-14203

Name of the Vulnerable Software and Affected Versions Xiaomi Cepheus Android device with a build fingerprint of Xiaomi/cepheus/cepheus:9/PKQ1.181121.001/V10.2.6.0.PFAMIXM:user/release-keys com.qualcomm.qti.callenhancement app version 9 Description The issue allows unauthorized microphone audio...

PT-2019-14204

Name of the Vulnerable Software and Affected Versions Xiaomi Mi A3 Android device with a build fingerprint of xiaomi/onc eea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys com.qualcomm.qti.callenhancement app version 9 versionCode=28 Description The issue allows unauthorized microphone...

PT-2019-14199

Name of the Vulnerable Software and Affected Versions Xiaomi Redmi Note 6 Pro Android device with a build fingerprint of xiaomi/tulip/tulip:8.1.0/OPM1.171019.011/V10.2.2.0.OEKMIXM:user/release-keys Description The issue allows other pre-installed apps to perform microphone audio recording via an...

CVE-2019-15470: Undefined Security Weakness

The Xiaomi Redmi Note 6 Pro Android device with a build fingerprint of xiaomi/tulip/tulip:8.1.0/OPM1.171019.011/V10.2.2.0.OEKMIXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app versionCode=27, versionName=8.1.0 that allows other...

CVE-2019-15472: Externally Controlled Reference to a Resource in Another Sphere

The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisysprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app versionCode=28, versionName=9 that allows unauthorized microphon...

CVE-2019-15469: Undefined Security Weakness

The Xiaomi Mi Pad 4 Android device with a build fingerprint of Xiaomi/clover/clover:8.1.0/OPM1.171019.019/V9.6.26.0.ODJCNFD:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app versionCode=27, versionName=8.1.0 that allows other pre-installed...

CVE-2019-15474: Externally Controlled Reference to a Resource in Another Sphere

The Xiaomi Cepheus Android device with a build fingerprint of Xiaomi/cepheus/cepheus:9/PKQ1.181121.001/V10.2.6.0.PFAMIXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app versionCode=28, versionName=9 that allows unauthorized microphone aud...