Vulnerability · Published Apr 21, 2022 · Assigned by Xiaomi
CVE-2020-14118
Medium 6.1
In plain English
A medium-severity security flaw in Mi App Store. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).
Severity (CVSS NVD)6.1Medium
Exploit odds (30 days)0.6%top 53.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Mi App Store | Mi App Store version <4.10.0 |
References
- https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=144 x_refsource_MISC