CVE-2019-15843: Mi Xiaomi Millet Firmware

High severity, CVSS 7.4. EPSS: 0.8% chance of exploitation in the next 30 days.

A malicious file upload vulnerability was discovered in Xiaomi Millet mobile phones 1-6.3.9.3. A particular condition involving a man-in-the-middle attack may lead to partial data leakage or malicious file writing.

Affected products

• Mi Xiaomi Millet Firmware: version 1-6.3.9.3 only

Published 2019-09-18. Last modified 2026-06-17.