CVE-2024-57062

Published Mar 13, 2025 CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Description
An issue in SoundCloud IOS application v.7.65.2 allows a local attacker to escalate privileges and obtain sensitive information via the session handling component.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-6393 An issue in SoundCloud IOS application v.7.65.2 allows a local attacker to escalate privileges and obtain sensitive information via the session handling component.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00015}

epss

{'score': 0.00022}

Type Values Removed Values Added
First Time appeared Soundcloud
Soundcloud soundcloud
CPEs cpe:2.3:a:soundcloud:soundcloud:7.65.2:*:*:*:*:iphone_os:*:*
Vendors & Products Soundcloud
Soundcloud soundcloud
Type Values Removed Values Added
Weaknesses CWE-269
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description An issue in SoundCloud IOS application v.7.65.2 allows a local attacker to escalate privileges and obtain sensitive information via the session handling component.
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Jul 5, 2026, 12:58 AM
Reserved
Jan 9, 2025, 12:00 AM
Status
Modified
Published
Mar 13, 2025, 4:15 PM
Modified
Jul 5, 2026, 1:21 AM