ASB-A-212467440

In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2020-14118

An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps...

CVE-2020-14116

An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this...

CVE-2020-14118

An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps...

CVE-2020-14116

An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this...

Information disclosure

An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this...

Information disclosure

An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps...

CVE-2020-14118

An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps...

CVE-2020-14118

CVE-2020-14118 affects the Xiaomi Mi App Store. The issue is an intent redirection vulnerability caused by the app store not verifying incoming data, which can cause automatic download/installation of apps. Documents confirm the root cause and impact (open redirect-like behavior) but do not provi...

CVE-2020-14116

CVE-2020-14116 affects Xiaomi Mi Browser. The issue is an open redirection vulnerability caused by Mi Browser not validating incoming data, enabling attackers to trigger sensitive operations. Related sources indicate vulnerability exists prior to version 15.8; remediation guidance suggests updati...

CVE-2020-14116

An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this...

CVE-2022-28542

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission...

CVE-2022-28542

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission...

CVE-2022-28542

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission...

CVE-2022-28542

CVE-2022-28542 : Samsung Galaxy Store before version 4.5.40.5 suffers from improper sanitization of incoming intents. This allows a local attacker to access privileged content providers using Galaxy Store permissions. Root cause is inadequate input sanitization of intents; affected software is Ga...

CVE-2020-23349

An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 com.sina.weibo.sdk.share.WbShareTransActivity, any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity...

CVE-2020-23349

An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 com.sina.weibo.sdk.share.WbShareTransActivity, any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity...

Authentication flaw

An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 com.sina.weibo.sdk.share.WbShareTransActivity, any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity...

CVE-2020-23349

An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 com.sina.weibo.sdk.share.WbShareTransActivity, any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity...

CVE-2020-23349

CVE-2020-23349 concerns the Sina Weibo Android SDK 4.2.7, where a vulnerability in the internal activity flow of com.sina.weibo.sdk.share.WbShareTransActivity allows any unexported activities to be started by this component via an intent redirection issue. The impact, as described in connected so...