Vulnerability Details CVE-2019-12762
Xiaomi Mi 5s Plus devices allow attackers to trigger touchscreen anomalies via a radio signal between 198 kHz and 203 kHz, as demonstrated by a transmitter and antenna hidden just beneath the surface of a coffee-shop table, aka Ghost Touch.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 4.5%
CVSS Severity
CVSS v3 Score 4.2
CVSS v2 Score 1.9
References
- https://hackercombat.com/nfc-vulnerability-may-promote-ghost-screen-taps/
- https://medium.com/%40juliodellaflora/ghost-touch-on-xiaomi-mi5s-plus-707998308607
- https://hackercombat.com/nfc-vulnerability-may-promote-ghost-screen-taps/
- https://medium.com/%40juliodellaflora/ghost-touch-on-xiaomi-mi5s-plus-707998308607
Products affected by CVE-2019-12762
-
cpe:2.3:h:fujitsu:arrows_nx_f05-f:-
-
cpe:2.3:h:google:nexus_7:-
-
cpe:2.3:h:google:nexus_9:-
-
cpe:2.3:h:mi:mi_5s_plus:-
-
cpe:2.3:h:samsung:galaxy_s4:-
-
cpe:2.3:h:samsung:galaxy_s6_edge:-
-
cpe:2.3:h:sharp:aquos_zeta_sh-04f:-
-
cpe:2.3:h:sony:xperia_z4:-
-
cpe:2.3:o:fujitsu:arrows_nx_f05-f_firmware:-
-
cpe:2.3:o:google:nexus_7_firmware:-
-
cpe:2.3:o:google:nexus_9_firmware:-
-
cpe:2.3:o:mi:mi_5s_plus_firmware:-
-
cpe:2.3:o:samsung:galaxy_s4_firmware:-
-
cpe:2.3:o:samsung:galaxy_s6_edge_firmware:-
-
cpe:2.3:o:sharp:aquos_zeta_sh-04f_firmware:-
-
cpe:2.3:o:sony:xperia_z4_firmware:-