PT-2023-22398 · Unknown · Story Saver For Instagram - Video Downloader

Nihan Bayrak · Published 2023-06-01 · Updated 2025-01-09 · CVE-2023-29748

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Story Saver for Instragram - Video Downloader version 1.0.6

Description The issue allows an attacker to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. This can cause the application to trigger an OOM error and crash at startup, resulting in a persistent denial of service.

Recommendations For version 1.0.6, consider restricting access to the SharedPreference file to prevent unauthorized modifications until a patch is available. As a temporary workaround, avoid using the method that provides access to modify the SharedPreference file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2023-29748

Affected Products

Story Saver For Instagram - Video Downloader

References · 8

• 🔥 https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29748/CVE%20detail.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-29748 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-29748 · Security Note
• https://t.me/cvenotify/51538 · Telegram Post
• https://t.me/cvenotify/106965 · Telegram Post
• https://instagram.com/nihans_macrame · Note
• https://apksos.com/app/story.saver.downloader.photo.video.repost.byrk · Note
• https://play.google.com/store/apps/details?id=ru.yandex.yandexnavi · Note