CVE-2020-9531

CVE-2020-9531 affects Xiaomi MIUI 11.0.5.0.QFAEUXM. In GetApps (com.xiaomi.mipicks) Web resources, parameters are read and executed; after parsing resource files, relevant components open the incoming URL, allowing data in the parameters to be loaded and executed. An attacker with near-field prox...

CVE-2020-9530

The CVE describes an issue in Xiaomi MIUI V11.0.5.0.QFAEUXM where the GetApps export component (com.xiaomi.mipicks) mishandles opening other components. An attacker could lure a user to load malicious web pages via WebView in Messaging (com.android.MMS) in a specific network environment, leading ...