CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-14126
https://notcve.org/view.php?id=CVE-2020-14126
Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information. Se presenta una vulnerabilidad de filtrado de información en la APP Mi Sound. Esta vulnerabilidad es causada por las llamadas ilegales de algunas interfaces JS confidenciales, que pueden ser explotadas por los atacantes para filtrar información confidencial • https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=278 •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 2CVE-2018-14948
https://notcve.org/view.php?id=CVE-2018-14948
An issue has been found in dilawar sound through 2017-11-27. The end of openWavFile in wav-file.cc has Mismatched Memory Management Routines (operator new [] versus operator delete). Se ha encontrado un problema en dilawar sound hasta el 27/11/2017. El final de openWavFile en wav-file.cc tiene rutinas de gestión de memoria no coincidentes (operator new [] en contraposición a operator delete). • https://github.com/dilawar/sound/issues/4 https://github.com/fouzhe/security/tree/master/sound#alloc-dealloc-mismatch-in-function-openwavfile • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •