Headline
CVE-2020-14125: 产品安全中心
A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attackers to make denial of service.
小米欢迎广大优秀的安全专家和安全研究团队加入小米漏洞响应计划（VDP），共同为全球亿万小米用户提供安全守护。您可通过在产品安全中心的安全漏洞响应页面了解小米的漏洞处理流程和漏洞提交方式。
小米对披露的相关安全漏洞信息，不承诺任何明示、默示和法定的担保，包括但不限于对适销性、适用性及不侵权的担保，您理解对您披露的安全漏洞信息仅作为您评估安全风险和做出安全决策的参考，您基于漏洞信息进行的任何行为的风险和后果由您自行承担。在任何情况下，小米对任何损失，包括直接，间接，偶然，必然的商业利润损失或特殊损失均不承担责任。
Related news
Mobile transactions could’ve been disabled, created and signed by attackers.
Security flaws have been identified in Xiaomi Redmi Note 9T and Redmi Note 11 models, which could be exploited to disable the mobile payment mechanism and even forge transactions via a rogue Android app installed on the devices. Check Point said it found the flaws in devices powered by MediaTek chipsets during a security analysis of the Chinese handset maker's "Kinibi" Trusted Execution