Arbitrary Code Execution Vulnerability in Xiaomi Browser - Xiaomi

CVE-2019-13322

Summary

This vulnerability in Xiaomi Browser prior to version 10.4.0 enables remote attackers to execute arbitrary code through an exploited flaw within the miui.share application. Successful exploitation requires user interaction, where the user must visit a malicious webpage or open a malicious file. The root cause of this security issue lies in the inadequate validation of user-supplied data, which can facilitate unauthorized application downloads, allowing the attacker to execute code within the user’s context.

References