CVE-2019-15471: Medium severity mi mix 2s firmware vulnerability
The Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=27, versionName=8.1.0) that allows other pre-installed apps to perform microphone audio recording via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that export their capabilities to other pre-installed app. This app allows a third-party app to use its open interface to record telephone calls to external storage.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-15471?
The severity of CVE-2019-15471 is considered to be high due to the potential unauthorized access it provides.
What vulnerability is associated with the Xiaomi Mi Mix 2S in CVE-2019-15471?
CVE-2019-15471 is associated with a pre-installed Qualcomm call enhancement app that allows access for other installed applications.
How do I fix CVE-2019-15471?
To fix CVE-2019-15471, uninstall the vulnerable pre-installed app or apply the latest firmware updates from Xiaomi.
What devices are affected by CVE-2019-15471?
The Xiaomi Mi Mix 2S device running specific firmware versions is affected by CVE-2019-15471.
Is there an exploit for CVE-2019-15471?
Yes, CVE-2019-15471 can be exploited by malicious apps to gain unauthorized access to sensitive information.