Buffer Overflow Vulnerability in Spotify for iOS
CVE-2024-42011

7.5HIGH

Key Information:

Vendor

Spotify

Vendor
CVE Published:
28 October 2024

What is CVE-2024-42011?

The Spotify app for iOS, specifically version 8.9.58, contains a buffer overflow vulnerability arising from improper handling of string concatenation using the strcat function. This flaw can lead to various malicious exploits, including application crashes and potential unauthorized code execution. Users of the affected version may experience instability issues, such as frequent crashes, lags, and overheating of the device, raising significant concerns regarding the overall security of the Spotify application on iOS devices.

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.