CVE-2024-45352 – Xiaomi smarthome application Webview has code execution vulnerability

https://notcve.org/view.php?id=CVE-2024-45352

27 Mar 2025 — An code execution vulnerability exists in the Xiaomi smarthome application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code. • https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=550 • CWE-346: Origin Validation Error •