CVE-2023-29748 — HIGH (7.5)

Vulnerability Description

Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an attacker injects too much data, the application will trigger an OOM error and crash at startup, resulting in a persistent denial of service.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Story Saver For Instagram - Video Downloader Project	Story Saver For Instagram - Video Downloader	1.0.6

References

https://apksos.com/app/story.saver.downloader.photo.video.repost.byrkProduct
https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29748/CVE%20detail.mdExploitThird Party Advisory
https://play.google.com/store/apps/details?id=ru.yandex.yandexnaviNot Applicable
https://www.instagram.com/nihans_macrame/Not Applicable
https://apksos.com/app/story.saver.downloader.photo.video.repost.byrkProduct
https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29748/CVE%20detail.mdExploitThird Party Advisory
https://play.google.com/store/apps/details?id=ru.yandex.yandexnaviNot Applicable
https://www.instagram.com/nihans_macrame/Not Applicable

FAQ

What is CVE-2023-29748?

CVE-2023-29748 is a vulnerability with a CVSS score of 7.5 (HIGH). Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a la...

How severe is CVE-2023-29748?

CVE-2023-29748 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-29748?

Check the references section above for vendor advisories and patch information. Affected products include: Story Saver For Instagram - Video Downloader Project Story Saver For Instagram - Video Downloader.