CVE-2024-46962

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

The SYQ com.downloader.video.fast (aka Master Video Downloader) application through 2.0 for Android allows an attacker to execute arbitrary JavaScript code via the com.downloader.video.fast.SpeedMainAct component.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
google	android	<= 2.0

References

Timeline

Published: Nov 11, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-469638.1The com.superfast.video.downloader (aka Super Unlimited Video Downloader - All in One) application through 5.1.9 for Android allows an attac CVE-2024-469648.1The com.video.downloader.all (aka All Video Downloader) application through 11.28 for Android allows an attacker to execute arbitrary JavaSc CVE-2024-469655.4The DS allvideo.downloader.browser (aka Fast Video Downloader: Browser) application through 1.6-RC1 for Android allows an attacker to execut CVE-2024-469668.1The Ikhgur mn.ikhgur.khotoch (aka Video Downloader Pro & Browser) application through 1.0.42 for Android allows an attacker to execute arbit CVE-2024-46975.4The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘heading_tag’ parameter in all ve CVE-2024-469706.1In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible CVE-2024-469717.8Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.CVE-2024-469727.8Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.CVE-2024-469737.8Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.CVE-2024-469747.8Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA buffers.CVE-2024-469757.9Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data into another Guest's v CVE-2024-469765.4Backstage is an open framework for building developer portals. An attacker with control of the contents of the TechDocs storage buckets is a