CVE-2020-9530

The CVE describes an issue in Xiaomi MIUI V11.0.5.0.QFAEUXM where the GetApps export component (com.xiaomi.mipicks) mishandles opening other components. An attacker could lure a user to load malicious web pages via WebView in Messaging (com.android.MMS) in a specific network environment, leading ...

PT-2020-20721

Name of the Vulnerable Software and Affected Versions Xiaomi MIUI versions prior to 2001122 Description An issue was discovered in the Web resources of GetApps com.xiaomi.mipicks where parameters passed in are read and executed. After reading the resource files, relevant components open the link ...