CVE-2026-127209 | Xiaomi Mi Browser up to 14.65.x ThirdDocViewerActivity CopyExternalFile.copyFromUri _display_name path traversal

A vulnerability described as problematic has been identified in Xiaomi Mi Browser up to 14.65.x. Affected by this vulnerability is the function CopyExternalFile.copyFromUri of the component ThirdDocViewerActivity. Executing a manipulation of the argument _display_name can lead to path traversal.

This vulnerability is handled as CVE-2026-127209. It is possible to launch the attack on the local host. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More