VULNERABILITY INTELLIGENCE
CVE-2020-14126
CVSS score7.5 HIGH
EPSS probability0.74%
CISA KEVNot currently listed
Published2022-07-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information.
Primary references
- security@xiaomi.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory