Huawei HarmonyOS HwChrService module licensing issue vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS is vulnerable to an authorization issue stemming from improper privilege management in the HwChrService module, which could be exploited b...

Huawei HarmonyOS deserialization vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, full-scenario distributed operating system. Huawei HarmonyOS is vulnerable to a deserialization vulnerability in the NFC module that results from insecure deserialization of serialized data submitted by th...

Xiaomi MIUI has an unspecified vulnerability (CNVD-2022-81249)

Xiaomi MIUI is an Android-based smartphone operating system developed by Xiaomi Technology China, Inc. A security vulnerability exists in Xiaomi MIUI due to a lack of checksum when using incoming parameters from a three-party application, which could be exploited by attackers to induce users to...

CVE-2020-14120

CVE-2020-14120 affects Xiaomi MIUI: a vulnerability in a Xiaomi app caused by missing checksum when third‑party apps pass parameters, enabling attacker‑driven installation of a malicious app that could gain elevated privileges and disrupt normal system services. No specific exploit details or pat...

CVE-2020-14120: Improper Validation of Integrity Check Value

Some Xiaomi models have a vulnerability in a certain application. The vulnerability is caused by the lack of checksum when using a three-party application to pass in parameters, and attackers can induce users to install a malicious app and use the vulnerability to achieve elevated privileges,...