Vulnerabilities (CVE)

Filtered by vendor Xiaomi Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-19939 1 Xiaomi 4 Mi A2 Lite, Mi A2 Lite Firmware, Redmi 6 and 1 more 2019-05-17 5.0 MEDIUM 7.5 HIGH
The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtp_read_Color in drivers/input/touchscreen/gt917d/gt9xx.c.
CVE-2018-20823 1 Xiaomi 2 Mi 5s, Mi 5s Firmware 2019-05-01 5.0 MEDIUM 7.5 HIGH
The gyroscope on Xiaomi Mi 5s devices allows attackers to cause a denial of service (resonance and false data) via a 20.4 kHz audio signal, aka a MEMS ultrasound attack.