CVE-2020-14123: Double Free
There is a pointer double free vulnerability in Some MIUI Services. When a function is called, the memory pointer is copied to two function modules, and an attacker can cause the pointer to be repeatedly released through malicious operations, resulting in the affected module crashing and affecting normal functionality, and if successfully exploited the vulnerability can cause elevation of privileges.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-14123.
What is the severity of CVE-2020-14123?
The severity of CVE-2020-14123 is high with a severity value of 7.5.
Which software is affected by CVE-2020-14123?
The MIUI software version 12.5.2 is affected by CVE-2020-14123.
How can an attacker exploit CVE-2020-14123?
An attacker can exploit CVE-2020-14123 by causing a pointer to be repeatedly released through malicious operations, resulting in crashing of the affected module.
Is there a fix available for CVE-2020-14123?
Please refer to the official advisory from MIUI for information on the fix for CVE-2020-14123.