CVE-2019-15843

CVE-2019-15843 is a malicious file upload vulnerability affecting Xiaomi Millet mobile phones running firmware versions 1 through 6.3.9.3. This high-severity vulnerability (CVSS 7.4) can be exploited via a man-in-the-middle attack, potentially leading to partial data leakage or the writing of malicious files onto the device. While the attack complexity is high, it requires no user interaction or privileges. There is currently no known active exploitation, public exploit code, or significant community discussion surrounding this CVE.