CVE-2020-9530

An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices

published March 6, 2020

CVSS
—
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetApps(com.xiaomi.mipicks) mishandles the functionality of opening other components. Attackers need to induce users to open specific web pages in a specific network environment. By jumping to the WebView component of Messaging(com.android.MMS) and loading malicious web pages, information leakage can occur. This is fixed on version: 2001122; 11.0.1.54.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01477 · 73.7th percentile
Published
2020-03-06T16:49Z
EPSS history
Timeline
  • 06 MAR 16:49Z
    An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices
    cvelistv5