VulnerabilityDeferred

CVE-2024-45353

An intent redriction vulnerability exists in the Xiaomi quick App framework application product.

MEDIUM 4.3EPSS 0.16%

Does this matter?

Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.

Description

An intent redriction vulnerability exists in the Xiaomi quick App framework application product. The vulnerability is caused by improper input validation and can be exploited by attackers tointent redriction.

CVSS 3.1: 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS: 0.16% probability · 5th percentile
CISA KEV: Not listed
Weakness: CWE-346
Source: security@xiaomi.com

References

https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=551

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.