Vulnerabilities in Xiaomi software