High severity8.4NVD Advisory· Published Mar 28, 2024· Updated Apr 15, 2026

CVE-2024-23727

Description

The YI Smart Kami Vision com.kamivision.yismart application through 1.0.0_20231219 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component.

Affected products

Actuator/Yireferences
Kami Vision/YI Smartllm-create
Range: <= 1.0.0_20231219

Patches

Vulnerability mechanics

References

github.com/actuator/yi/blob/main/com.kamivision.yismart.V1.0.0_20231219.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000