HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2020-14127

CVSS 7.5v3.1pub. 2022-07-14upd. 2024-11-21

A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by heap overflow and can be exploited by attackers to make remote denial of service.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Mi Miui

    OS
    Mi
    < 2022.07.01

  • Mi Redmi K40

    HW
    Mi
    all versions

  • Mi Redmi Note 10 Pro

    HW
    Mi
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoSMemory
CWE
References

Related vulnerabilities

CVE-2020-14125HIGH7.5same product

A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-o...

CVE-2020-14123HIGH7.5same product

There is a pointer double free vulnerability in Some MIUI Services. When a function is called, the memory poin...

CVE-2020-14120HIGH8.8same product

Some Xiaomi models have a vulnerability in a certain application. The vulnerability is caused by the lack of c...

CVE-2020-9531HIGH7.3same product

An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. In the Web resources of GetApps(com.xiaomi.m...

CVE-2020-14122MEDIUM5.5same product

Some Xiaomi phones have information leakage vulnerabilities, and some of them may be able to forge a specific ...