Arbitrary Code Execution Vulnerability in Xiaomi Browser

CVE-2019-13321

Summary

The vulnerability present in Xiaomi Browser prior to version 10.4.0 allows network adjacent attackers to execute arbitrary code through malicious HTTP responses to the Captive Portal. Exploitation requires user interaction, specifically, the target must connect to a malicious access point. A specially crafted HTML response can trigger the Captive Portal to open a browser to a predetermined location without user interaction. This flaw poses significant risks as it can be exploited alongside other vulnerabilities to execute code within the context of the currently running process.

References