Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. In the Web resources of GetApps(com.xiaomi.mipicks), the parameters passed in are read and executed. After reading the resource files, relevant components open the link of the incoming URL. Although the URL is safe and can pass security detection, the data carried in the parameters are loaded and executed. An attacker can use NFC tools to get close enough to a user's unlocked phone to cause apps to be installed and information to be leaked. This is fixed on version: 2001122.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xiaomi MIUI 信息泄露漏洞
Vulnerability Description
Xiaomi MIUI是中国小米科技（Xiaomi）公司的一套基于Android开发的智能手机操作系统。 Xiaomi MIUI 11.0.5.0.QFAEUXM版本中存在信息泄露漏洞。攻击者可借助NFC工具利用该漏洞安装应用程序，获取信息。
CVSS Information
N/A
Vulnerability Type
N/A