CVE-2020-14123: Double Free
First published: Fri Apr 22 2022(Updated: )
There is a pointer double free vulnerability in Some MIUI Services. When a function is called, the memory pointer is copied to two function modules, and an attacker can cause the pointer to be repeatedly released through malicious operations, resulting in the affected module crashing and affecting normal functionality, and if successfully exploited the vulnerability can cause elevation of privileges.
Credit: security@xiaomi.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| mi MIUI | =12.5.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-14123.
What is the severity of CVE-2020-14123?
The severity of CVE-2020-14123 is high with a severity value of 7.5.
Which software is affected by CVE-2020-14123?
The MIUI software version 12.5.2 is affected by CVE-2020-14123.
How can an attacker exploit CVE-2020-14123?
An attacker can exploit CVE-2020-14123 by causing a pointer to be repeatedly released through malicious operations, resulting in crashing of the affected module.
Is there a fix available for CVE-2020-14123?
Please refer to the official advisory from MIUI for information on the fix for CVE-2020-14123.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/mi
- canonical/mi miui
- version/mi miui/12.5.2