CVE-2018-20523

CVE-2018-20523 affects Xiaomi Stock Browser 10.2.4.g on Redmi Note 5 Pro and other Redmi Android phones. The issue is a content provider injection in the vulnerable component com.android.browser.searchhistory, allowing a third‑party app to read the user’s cleartext browser history via a query to ...

CVE-2019-15340

The CVE-2019-15340 entry concerns Xiaomi Redmi 6 Pro devices running Android 8.1.0 with a pre-installed app (package com.huaqin.factory app, versionCode=1, versionName=QL1715_201805292006). The app exposes an interface that lets any co-located app disable/enable Wi‑Fi, Bluetooth, and GPS without ...

CVE-2018-19939

The CVE-2018-19939 entry concerns the Goodix GT9xx touchscreen driver used in Xiaomi Mi A2 Lite and RedMi6 pro on custom Linux kernels up to 2018-08-27. Root cause: NULL pointer dereference in kfree following a kmalloc failure in gtp_read_Color within drivers/input/touchscreen/gt917d/gt9xx.c. Imp...