CVE-2024-45351

A code execution vulnerability exists in the Xiaomi Game center application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=549

Configurations

No configuration.

History

27 Mar 2025, 16:45

Type	Values Removed	Values Added
Summary		(es) Existe una vulnerabilidad de ejecución de código en la aplicación Xiaomi Game Center. Esta vulnerabilidad se debe a una validación de entrada incorrecta y puede ser explotada por atacantes para ejecutar código malicioso.

26 Mar 2025, 14:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-03-26 14:15

Updated : 2025-03-27 16:45

NVD link : CVE-2024-45351

Mitre link : CVE-2024-45351

CVE.ORG link : CVE-2024-45351

JSON object : View

Products Affected

No product.

CWE

CWE-1284

Improper Validation of Specified Quantity in Input

{"id": "CVE-2024-45351", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@xiaomi.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2025-03-26T14:15:31.457", "references": [{"url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=549", "source": "security@xiaomi.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security@xiaomi.com", "description": [{"lang": "en", "value": "CWE-1284"}]}], "descriptions": [{"lang": "en", "value": "A code execution vulnerability exists in the Xiaomi Game center application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code."}, {"lang": "es", "value": "Existe una vulnerabilidad de ejecuci\u00f3n de c\u00f3digo en la aplicaci\u00f3n Xiaomi Game Center. Esta vulnerabilidad se debe a una validaci\u00f3n de entrada incorrecta y puede ser explotada por atacantes para ejecutar c\u00f3digo malicioso."}], "lastModified": "2025-03-27T16:45:27.850", "sourceIdentifier": "security@xiaomi.com"}

7.8 /10