mi Vulnerability Advisory Catalog

Total 100 security vulnerabilities recorded for mi software and firmware.

← Back to All Vendors
Component: redmi_note_6_pro_firmware

The Xiaomi Redmi Note 6 Pro Android device with a build fingerprint of xiaomi/tulip/tulip:8.1.0/OPM1.171019.011/V10.2.2.0.OEKMIXM:user/release-keys co...

📅 2019-11-14
CVSS 5.5 Dossier →
Component: pad_4_firmware

The Xiaomi Mi Pad 4 Android device with a build fingerprint of Xiaomi/clover/clover:8.1.0/OPM1.171019.019/V9.6.26.0.ODJCNFD:user/release-keys contains...

📅 2019-11-14
CVSS 5.5 Dossier →
Component: a2_lite_firmware

The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisy_sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys conta...

📅 2019-11-14
CVSS 5.5 Dossier →
Component: mix_2s_firmware

The Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys conta...

📅 2019-11-14
CVSS 3.3 Dossier →
Component: redmi_6_pro_firmware

The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V10.2.6.0.ODMMIXM:user/releas...

📅 2019-11-14
CVSS 3.3 Dossier →
Component: note_2_firmware

The Xiaomi Mi Note 2 Android device with a build fingerprint of Xiaomi/scorpio/scorpio:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed a...

📅 2019-11-14
CVSS 3.3 Dossier →
Component: mix_firmware

The Xiaomi Mi Mix Android device with a build fingerprint of Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app ...

📅 2019-11-14
CVSS 3.3 Dossier →
Component: 5s_plus_firmware

The Xiaomi 5S Plus Android device with a build fingerprint of Xiaomi/natrium/natrium:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app...

📅 2019-11-14
CVSS 3.3 Dossier →
Component: redmi_5_firmware

The Xiaomi Redmi 5 Android device with a build fingerprint of xiaomi/vince/vince:7.1.2/N2G47H/V9.5.4.0.NEGMIFA:user/release-keys contains a pre-instal...

📅 2019-11-14
CVSS 3.3 Dossier →
Component: redmi_6_firmware

The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V9.6.4.0.ODMMIFD:user/release...

📅 2019-11-14
CVSS 3.3 Dossier →
Component: millet_router_3g_firmware

An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerability to read arbitrary files via ...

📅 2019-10-23
CVSS 7.5 Dossier →
CVE-2019-18370 CRITICAL
Component: millet_router_3g_firmware

An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application use...

📅 2019-10-23
CVSS 9.8 Dossier →
Component: xiaomi_millet_firmware

A malicious file upload vulnerability was discovered in Xiaomi Millet mobile phones 1-6.3.9.3. A particular condition involving a man-in-the-middle at...

📅 2019-09-18
CVSS 7.4 Dossier →
Component: stock_browser

Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other words, a t...

📅 2019-06-07
CVSS 5.3 Dossier →
Component: mi_5s_plus_firmware

Xiaomi Mi 5s Plus devices allow attackers to trigger touchscreen anomalies via a radio signal between 198 kHz and 203 kHz, as demonstrated by a transm...

📅 2019-06-06
CVSS 4.2 Dossier →
Component: mi6_browser

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Mi6 Browser prior to 10.4.0. User interacti...

📅 2019-06-03
CVSS 8.8 Dossier →
Component: m365_firmware

The Xiaomi M365 scooter 2019-02-12 before 1.5.1 allows spoofing of "suddenly accelerate" commands. This occurs because Bluetooth Low Energy commands h...

📅 2019-05-31
CVSS 6.5 Dossier →
Component: mi_5s_firmware

The gyroscope on Xiaomi Mi 5s devices allows attackers to cause a denial of service (resonance and false data) via a 20.4 kHz audio signal, aka a MEMS...

📅 2019-04-25
CVSS 7.5 Dossier →
Component: mi_browser

A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g (aka the MIUI native browser) and Mint Browser 1.5....

📅 2019-04-05
CVSS 6.5 Dossier →
CVE-2019-8413 MEDIUM
Component: mi_mix_2_firmware

On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 ...

📅 2019-02-17
CVSS 5.5 Dossier →
CVE-2018-18698 CRITICAL
Component: xiaomi_mi-a1_firmware

An issue was discovered on Xiaomi Mi A1 tissot_sprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat d...

📅 2018-12-24
CVSS 9.8 Dossier →
Component: mi_a2_lite_firmware

The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices throug...

📅 2018-12-07
CVSS 7.5 Dossier →
Component: miwifi_os

System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary system commands via the "payload"...

📅 2018-11-27
CVSS 8.8 Dossier →
Component: miwifi_os

System command injection vulnerability in wifi_access in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via the "timeo...

📅 2018-11-27
CVSS 8.8 Dossier →
Page 4 of 5 (100 Total Records)