CVE-2019-8792

CVE-2019-8792 affects Shazam mobile apps (Android 9.25.0+, iOS 12.11.0+) where processing a crafted URL could trigger arbitrary JavaScript execution due to an injection issue stemming from insufficient URL/URL-scheme validation. The issue is addressed in Shazam Android 9.25.0 and iOS 12.11.0. Roo...

CVE-2019-8791

CVE-2019-8791 concerns Shazam’s handling of URL schemes. The issue is due to improper parsing that can lead to an open redirect when processing malicious URLs. Affected products/versions: Shazam Android App prior to 9.25.0 and Shazam iOS App prior to 12.11.0. Mitigation: upgrade to Android 9.25.0...