Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for sound by mi

    CVE-2020-14126 (GCVE-0-2020-14126)

    Vulnerability from nvd – Published: 2022-07-22 15:30 – Updated: 2024-08-04 12:39
    VLAI
    Summary
    Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information.
    Severity
    No CVSS data available.
    CWE
    • Information leakage
    Assigner
    References
    Impacted products
    Vendor Product Version
    n/a Mi Sound APP Affected: Mi Sound APP <=2.2.40
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-04T12:39:35.966Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=278"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Mi Sound APP",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "Mi Sound APP \u003c=2.2.40"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "Information leakage",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-07-22T15:30:39.000Z",
            "orgId": "b57733aa-7326-4f07-8e09-0be8e0df1909",
            "shortName": "Xiaomi"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=278"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@xiaomi.com",
              "ID": "CVE-2020-14126",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Mi Sound APP",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "Mi Sound APP \u003c=2.2.40"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "Information leakage"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=278",
                  "refsource": "MISC",
                  "url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=278"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "b57733aa-7326-4f07-8e09-0be8e0df1909",
        "assignerShortName": "Xiaomi",
        "cveId": "CVE-2020-14126",
        "datePublished": "2022-07-22T15:30:39.000Z",
        "dateReserved": "2020-06-15T00:00:00.000Z",
        "dateUpdated": "2024-08-04T12:39:35.966Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2020-14126 (GCVE-0-2020-14126)

    Vulnerability from cvelistv5 – Published: 2022-07-22 15:30 – Updated: 2024-08-04 12:39
    VLAI
    Summary
    Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information.
    Severity
    No CVSS data available.
    CWE
    • Information leakage
    Assigner
    References
    Impacted products
    Vendor Product Version
    n/a Mi Sound APP Affected: Mi Sound APP <=2.2.40
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-04T12:39:35.966Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=278"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Mi Sound APP",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "Mi Sound APP \u003c=2.2.40"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "Information leakage",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-07-22T15:30:39.000Z",
            "orgId": "b57733aa-7326-4f07-8e09-0be8e0df1909",
            "shortName": "Xiaomi"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=278"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@xiaomi.com",
              "ID": "CVE-2020-14126",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Mi Sound APP",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "Mi Sound APP \u003c=2.2.40"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "Information leakage"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=278",
                  "refsource": "MISC",
                  "url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=278"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "b57733aa-7326-4f07-8e09-0be8e0df1909",
        "assignerShortName": "Xiaomi",
        "cveId": "CVE-2020-14126",
        "datePublished": "2022-07-22T15:30:39.000Z",
        "dateReserved": "2020-06-15T00:00:00.000Z",
        "dateUpdated": "2024-08-04T12:39:35.966Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }