Access Vulnerability in Baidu Input Method for iOS by Baidu (China) Co Ltd
CVE-2024-56953

6.5MEDIUM

Key Information:

Vendor

Baidu (China) Co Ltd

Status
Baidu Input Method
Vendor
CVE Published:
27 January 2025

What is CVE-2024-56953?

An access vulnerability in Baidu Input Method for iOS version 12.6.13 allows malicious actors to exploit the application by delivering a specially crafted link. This issue can lead to unauthorized access to sensitive user information, posing significant privacy risks. Users of this application should remain vigilant and apply any available updates provided by the vendor to mitigate potential threats.

References

https://github.com/ZhouZiyi1/Vuls/blob/main/241217-BaiduI...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-56953 : Access Vulnerability in Baidu Input Method for iOS by Baidu (China) Co Ltd