CVE-2024-38480

MediumCVSS 4.0/10Last modified Jun 17, 2026

Description

"Piccoma" App for Android and iOS versions prior to 6.20.0 uses a hard-coded API key for an external service, which may allow a local attacker to obtain the API key. Note that the users of the app are not directly affected by this vulnerability.

Metrics

CVSS 3.1 4.0/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-798

Affected software

VendorProductVersions
Kakao piccoma Corp."Piccoma" App for Androidprior to 6.20.0
Kakao piccoma Corp."Piccoma" App for iOSprior to 6.20.0

References

Timeline

Published
Jul 1, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-384814.4Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A privileged local attacker could execute arCVE-2024-384827.2CloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Cluster Component. A higCVE-2024-384836.7Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local acCVE-2024-384854.3Dell ECS, versions prior to 3.8.0, contain(s) a Host Header Injection Vulnerability. A remote low-privileged attacker could potentially explCVE-2024-384868.8Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x , contain(s) an Improper Neutralization of Special ElemenCVE-2024-384877.0api-gateway container running with root privilege would allow an attacker to escape the container and access host system to perform unintendCVE-2024-384889.8Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability wheCVE-2024-384894.4Dell iDRAC Service Module version 5.3.0.0 and prior contains Out of bound write Vulnerability. A privileged local attacker could execute arbCVE-2024-38498.8The Click to Chat – HoliThemes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.35. This mCVE-2024-384904.4Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute aCVE-2024-384918.4The vulnerability allows an unauthenticated attacker to read arbitrary information from the database.CVE-2024-384929.4This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a speciall
CVE-2024-38480: Medium severity, CVSS 4.0 | Vulnix