PT-2023-22398 · Unknown · Story Saver For Instagram - Video Downloader

Nihan Bayrak · Publicado 2023-06-01 · Atualizado 2025-01-09 · CVE-2023-29748

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Story Saver for Instragram - Video Downloader version 1.0.6

Description The issue allows an attacker to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. This can cause the application to trigger an OOM error and crash at startup, resulting in a persistent denial of service.

Recommendations For version 1.0.6, consider restricting access to the SharedPreference file to prevent unauthorized modifications until a patch is available. As a temporary workaround, avoid using the method that provides access to modify the SharedPreference file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2023-29748

Produtos afetados

Story Saver For Instagram - Video Downloader

Referências · 8

• 🔥 https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29748/CVE%20detail.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-29748 · Aviso do Fabricante
• https://t.me/cvenotify/51538 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-29748 · Nota de Segurança
• https://t.me/cvenotify/106965 · Publicação no Telegram
• https://instagram.com/nihans_macrame · Nota
• https://apksos.com/app/story.saver.downloader.photo.video.repost.byrk · Nota
• https://play.google.com/store/apps/details?id=ru.yandex.yandexnavi · Nota