CVE-2019-8792

CVE-2019-8792: vulnerability in Apple Shazam-Android

Published · Updated

Follow this CVE+ Monitor Shazam-Android+ Monitor Shazam-iOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.8%
An injection issue was addressed with improved validation. This issue is fixed in Shazam Android App Version 9.25.0, Shazam iOS App Version 12.11.0. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.
Affected products
Apple · Shazam-AndroidApple · Shazam-iOS
Related CVEs — Apple Shazam-Android

In the same product, most dangerous first.

CVE-2019-8791—CVE-2019-8791EPSS 1.0%