CVE-2024-1609 HIGH

CVE-2024-1609: OPPO Store APP has a WebView component privilege escalation vulnerability.

Vendor Oppo

Product OPPP Store

Weakness CWE-287 · Improper authentication

Published December 25, 2024

Last update December 26, 2024

CVSS base score

8.7/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

In OPPOStore iOS App, there's a possible escalation of privilege due to improper input validation.

Key dates

December 25, 2024 CVE published

December 26, 2024 Record updated

External resources

Related vulnerabilities