Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-45354 EUVD-2025-8289GHSA-3vwf-8mrh-29c3

xiaomi shop application Webview has code execution vulnerability

Published Mar 27, 2025 · Updated Mar 27, 2025 · Assigned by Xiaomi

Description

A code execution vulnerability exists in the Xiaomi shop applicationproduct. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code.

Affected products

VendorProductAffectedFixed
Xiaomi Xiaomi shop application Xiaomi shop application 5.30.0.20241103.r1 —

References