First published: Fri Sep 11 2020(Updated: )
Memory overflow in Xiaomi AI speaker Rom version <1.59.6 can happen when the speaker verifying a malicious firmware during OTA process.
Credit: security@xiaomi.com
Affected Software | Affected Version | How to fix |
---|---|---|
Mi Xiaomi Ai Speaker Firmware | <1.59.6 | |
Mi Xiaomi Ai Speaker |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability severity of CVE-2020-14096 is critical with a severity value of 9.8.
The Xiaomi AI speaker ROM version <1.59.6 is affected by CVE-2020-14096.
CVE-2020-14096 can result in memory overflow when the Xiaomi AI speaker verifies a malicious firmware during the OTA process.
To fix CVE-2020-14096, it is recommended to update the Xiaomi AI speaker ROM version to a version higher than 1.59.6.
More information about CVE-2020-14096 can be found at the following reference: [link](https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=19&locale=en)