« Back to list

CVE-2024-8039

Status: DeferredCritical (9.8)—

Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account takeover risks.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.

Afmobi — BoomplayerAI

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2024-8039",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-8039",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-16T19:12:58.622481Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea",
      "affectedData": [
        {
          "vendor": "TECNO",
          "product": "com.afmobi.boomplayer",
          "versions": [
            {
              "status": "affected",
              "version": "7.2.12"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:tecno:com.afmobi.boomplayer:7.2.12:*:*:*:*:*:*:*"
          ],
          "vendor": "tecno",
          "product": "com.afmobi.boomplayer",
          "versions": [
            {
              "status": "affected",
              "version": "7.2.12"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-09-14T04:15:04.377",
  "references": [
    {
      "url": "https://security.tecno.com/SRC/blogdetail/307?lang=en_US",
      "source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea"
    },
    {
      "url": "https://security.tecno.com/SRC/securityUpdates?type=SA",
      "source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account takeover risks."
    },
    {
      "lang": "es",
      "value": "Configuración de permisos incorrecta en la vulnerabilidad de configuración de dominio de la aplicación móvil (com.afmobi.boomplayer) puede generar riesgos de apropiación de cuentas."
    }
  ],
  "lastModified": "2026-06-17T08:21:44.533",
  "sourceIdentifier": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea"
}