Unspecified vulnerability in Xiaomi MIUI

Xiaomi MIUI is a set of Android-based smartphone operating systems developed by China's Xiaomi Technology Xiaomi. A security vulnerability exists in Xiaomi MIUI version V11.0.5.0.QFAEUXM, which originates from the program not properly handling functions used to open other components. The...

Design/Logic Flaw

An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetAppscom.xiaomi.mipicks mishandles the functionality of opening other components. Attackers need to induce users to open specific web pages in a specific network environment. By jumping to the WebView...

CVE-2020-9531

CVE-2020-9531 affects Xiaomi MIUI 11.0.5.0.QFAEUXM. In GetApps (com.xiaomi.mipicks) Web resources, parameters are read and executed; after parsing resource files, relevant components open the incoming URL, allowing data in the parameters to be loaded and executed. An attacker with near-field prox...

CVE-2020-9530

The CVE describes an issue in Xiaomi MIUI V11.0.5.0.QFAEUXM where the GetApps export component (com.xiaomi.mipicks) mishandles opening other components. An attacker could lure a user to load malicious web pages via WebView in Messaging (com.android.MMS) in a specific network environment, leading ...