CVE-2024-46962
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Nov 11, 2024
Updated: Nov 12, 2024
CWE ID 94
Summary
CVE-2024-46962 is a vulnerability affecting the Master Video Downloader app for Android, specifically version 2.0 of the com.downloader.video.fast package. This issue allows an attacker to inject and execute arbitrary JavaScript code through the SpeedMainAct component, potentially leading to unauthorized access, data theft, or malware installation on the affected device. Users are advised to avoid using the vulnerable app until a patch is released or consider alternative, more secure solutions for their video downloading needs.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.