PatchTheCVECVE-2019-11015: A vulnerability was found in the MIUI OS version 10.1.3.0 that allows a physically proximate attacker to bypas
CVE-2019-11015 is a medium-severity flaw (CVSS 6.8) affecting miui. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability was found in the MIUI OS version 10.1.3.0 that allows a physically proximate attacker to bypass Lockscreen based authentication via the Wallpaper Carousel application to obtain sensitive Clipboard data and the user's stored credentials (partially). This occurs because of paste access to a social media login page.
Why this priority
- Public exploit reference
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 6.8 (Medium) |
| Attack vector | Physical |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.5% (top 55%) |
| CISA exploited list | No |
| Weakness | CWE-287 |
| Published | 2019-04-18 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2019-11015?
miui: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2019-11015 being exploited?
CVE-2019-11015 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2019-11015 affect?
CVE-2019-11015 affects miui. Severity is medium (CVSS 6.8). A vulnerability was found in the MIUI OS version 10.1.3.0 that allows a physically proximate attacker to bypass Lockscreen based authentication via the Wallpaper Carousel application to obtain sensitive Clipboard data and the user's stored
How urgent is CVE-2019-11015?
Priority 40/100. Public exploit reference
Related CVEs
- CVE-2020-14127 HIGH 7.5 UPGRADE A denial of service vulnerability exists in some Xiaomi models of phones
- CVE-2020-14125 HIGH 7.5 UPGRADE A denial of service vulnerability exists in some Xiaomi models of phones
- CVE-2020-14123 HIGH 7.5 MITIGATE There is a pointer double free vulnerability in Some MIUI Services
- CVE-2020-14122 MEDIUM 5.5 MITIGATE Some Xiaomi phones have information leakage vulnerabilities, and some of them may be able to forge a specific
- CVE-2020-14120 HIGH 8.8 MITIGATE Some Xiaomi models have a vulnerability in a certain application