CVE-2024-3305

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub allows Retrieve Embedded Sensitive Data.

This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-639 CWE-862

Affected software

No affected versions have been published.

Timeline

Published: Sep 12, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-330507.5Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.CVE-2024-330517.5Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.CVE-2024-330527.8Memory corruption when user provides data for FM HCI command control operations.CVE-2024-330536.7Memory corruption when multiple threads try to unregister the CVP buffer at the same time.CVE-2024-330547.8Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.CVE-2024-330557.8Memory corruption while invoking IOCTL calls to unmap the DMA buffers.CVE-2024-330567.8Memory corruption when allocating and accessing an entry in an SMEM partition continuously.CVE-2024-330577.5Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the locatio CVE-2024-330587.5Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.CVE-2024-330597.8Memory corruption while processing frame command IOCTL calls.CVE-2024-33067.5Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrectly Configured Acces CVE-2024-330607.8Memory corruption when two threads try to map and unmap a single node simultaneously.