CVE-2019-15470: Medium severity mi redmi note 6 pro firmware vulnerability
The Xiaomi Redmi Note 6 Pro Android device with a build fingerprint of xiaomi/tulip/tulip:8.1.0/OPM1.171019.011/V10.2.2.0.OEKMIXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=27, versionName=8.1.0) that allows other pre-installed apps to perform microphone audio recording via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that export their capabilities to other pre-installed app. This app allows a third-party app to use its open interface to record telephone calls to external storage.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2019-15470.
What is the severity level of CVE-2019-15470?
The severity level of CVE-2019-15470 is medium (5.5).
Which Xiaomi device is affected by this vulnerability?
The Xiaomi Redmi Note 6 Pro is affected by this vulnerability.
What is the affected software of CVE-2019-15470?
The affected software of CVE-2019-15470 is Mi Redmi Note 6 Pro Firmware.
Is the Xiaomi Redmi Note 6 Pro itself vulnerable?
No, the Xiaomi Redmi Note 6 Pro itself is not vulnerable.