CVE-2019-9111

CVE-2019-9111 affects the msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3. The vulnerability is an integer overflow in sde_evtlog_filter_write (drivers/gpu/drm/msm/sde_dbg.c) caused by missing checks of the count argument, leading to an OOPS and potential device crash vi...

CVE-2018-20787

The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the size argument in tpdbgwrite in drivers/input/touchscreen/ft5x46/ft5x46ts.c. This is exploitable for a device crash v...

CVE-2019-9112

The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in sdedebugfsconncmdtxwrite in drivers/gpu/drm/msm/sde/sdeconnector.c. This is exploitable for a device crash vi...

CVE-2019-9112

The CVE-2019-9112 vulnerability affects the MSM GPU driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device (through 2018-11-26). It is caused by an integer overflow due to missing checks of the count argument in _sde_debugfs_conn_cmd_tx_write within drivers/gpu/drm/msm/sde/sde_c...

Null pointer dereference

On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a system crash via IOCTL 0x4008c575 aka decimal 1074316661...

CVE-2019-8413

On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a system crash via IOCTL 0x4008c575 aka decimal 1074316661...

CVE-2019-8413

On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a system crash via IOCTL 0x4008c575 aka decimal 1074316661...

CVE-2019-8413

On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a system crash via IOCTL 0x4008c575 aka decimal 1074316661...

CVE-2019-8413

CVE-2019-8413 affects Xiaomi MIX 2 devices running kernel 4.4.78. The vulnerability is a NULL pointer dereference in the ioctl interface for device files /dev/elliptic1 or /dev/elliptic0, triggered by IOCTL 0x4008c575 (decimal 1074316661) that can cause a system crash. Connected sources corrobora...

PT-2019-19020 · Linux Foundation +1 · Linux +1

Name of the Vulnerable Software and Affected Versions: Xiaomi MIX 2 devices with kernel version 4.4.78 Description: A NULL pointer dereference issue exists in the ioctl interface of the device files /dev/elliptic1 or /dev/elliptic0, which can cause a system crash when IOCTL 0x4008c575 decimal...

Xiaomi Electric Scooters Vulnerable to Life-Threatening Remote Hacks

Smart devices definitely make our lives easier, faster, and more efficient, but unfortunately, an insecure smart device can also ruin your day, or sometime could even turn into the worst nightmare of your life. If you are an electric scooter rider, you should be concerned about yourself. In a...

Xiaomi Electric Scooters Vulnerable to Life-Threatening Remote Hacks

Smart devices definitely make our lives easier, faster, and more efficient, but unfortunately, an insecure smart device can also ruin your day, or sometime could even turn into the worst nightmare of your life. If you are an electric scooter rider, you should be concerned about yourself. In a...

The Xiaomi M365 Scooter Can Be Hacked to Speed Up or Stop

A hacker can accelerate Xiaomi M365 scooter—or hit the breaks—while a rider is on it...

Xiaomi Mi A1 Information Disclosure Vulnerability

The Xiaomi Mi A1 is a smartphone from Chinese company Xiaomi. An information disclosure vulnerability exists in the Xiaomi Mi A1 tissotsprout version 8.1.0, OPM version 1.171019.026, and version 9.6.4.0.ODHMIFE, which stems from the device storing plaintext Wi-Fi passwords in logcat during the...

Design/Logic Flaw

An issue was discovered on Xiaomi Mi A1 tissotsprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot...

CVE-2018-18698

An issue was discovered on Xiaomi Mi A1 tissotsprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot...

CVE-2018-18698

An issue was discovered on Xiaomi Mi A1 tissotsprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot...

CVE-2018-18698

Affected product/variant: Xiaomi Mi A1 (tissot_sprout) running 8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE. Vulnerability detail: The device stores cleartext Wi‑Fi passwords in logcat during the process of enabling hotspot, exposing credentials. Impact: Unauthorized disclosure of Wi‑Fi passwords. Root...

Xiaomi Mi A2 Lite and RedMi6 pro Goodix GT9xx Touchscreen Driver Code Issue Vulnerability

The Xiaomi Mi A2 Lite and RedMi6 pro are both smartphones from Chinese company Xiaomi Technology Xiaomi. A code issue vulnerability exists in the Goodix GT9xx touchscreen driver used to customize the Goodix GT9xx in the Xiaomi Mi A2 Lite and RedMi6 pro 2018-08-27 and prior versions. The...

Null pointer dereference

The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtpreadColor in drivers/input/touchscreen/gt917d/gt9xx.c...