Medium (5.5). EPSS 0.1% chance of exploitation in the next 30 days.
A unauthorized access vulnerability exists in the Xiaomi phone framework. The vulnerability is caused by improper validation and can be exploited by attackers to Access sensitive methods.
Severity
CVSS 3.1
5.5 medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.1% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)