CVE Catalog

CVE-2024-57062

MediumCVSS 6.7
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.12%

2th percentile - higher than 2% of all known CVEs

Summary

A vulnerability in the SoundCloud iOS application version 7.65.2 allows a local attacker to escalate privileges and obtain sensitive information through the session handling component.

Risk Assessment

The risk involves potential session hijacking and access to confidential data, which could lead to privacy breaches and account compromise.

Recommendation

It is recommended to immediately update the SoundCloud app to the latest available version and monitor vendor advisories for security patches.

Original NVD description (English source)

An issue in SoundCloud IOS application v.7.65.2 allows a local attacker to escalate privileges and obtain sensitive information via the session handling component.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS