What’s Vulnerable › Vulnerabilities

CVE-2024-42011

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-28 · updated 2026-06-17
• Weakness: CWE-120

Description

The Spotify app 8.9.58 for iOS has a buffer overflow in its use of strcat.

Affected products

• Spotify App: 8.9.58

References

• https://community.spotify.com/t5/iOS-iPhone-iPad/Spotify-constantly-crashes-lags-and-heats-up-my-battery/td-p/6217537
• https://luminous-reminder-337.notion.site/Buffer-Overflow-Vulnerability-in-Spotify-iOS-App-Steps-to-Reproduce-By-0xRushy-5114aa2548e2401eb6812a12af888b8c

Get alerted when CVE-2024-42011 or the next vulnerability affects your stack