A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of the products being bypassed, and an attacker can exploit the vulnerability to perform a local silent installation.
https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=146