CVE-2024-2365

MEDIO 4.2CVE-2024-2365 · Published 11/03/2024 · updated 17/06/2026

In breve

CVE-2024-2365 è una vulnerabilità MEDIO (CVSS 4.2) che riguarda musicshelf (kirillmakarov).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.28%, superiore al 20.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
musicshelf kirillmakarov	`= 1.1`	No fix yet

Description

A vulnerability classified as problematic was found in Musicshelf 1.0/1.1 on Android. Affected by this vulnerability is an unknown functionality of the file io\fabric\sdk\android\services\network\PinningTrustManager.java of the component SHA-1 Handler. The manipulation leads to password hash with insufficient computational effort. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-256321 was assigned to this vulnerability.

References

ctflearner/Android_Findings · Exploit
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Altre vulnerabilità di musicshelf

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free