Medium severity6.1NVD Advisory· Published Dec 18, 2019· Updated Jun 17, 2026

CVE-2019-8791

Description

An issue existed in the parsing of URL schemes. This issue was addressed with improved URL validation. This issue is fixed in Shazam Android App Version 9.25.0, Shazam iOS App Version 12.11.0. Processing a maliciously crafted URL may lead to an open redirect.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Shazam/Shazam iOS Appllm-create
Range: = 12.11.0
Shazam/Shazam Android Appllm-create
Range: = 9.25.0
Apple Inc./Shazam2 versions
cpe:2.3:a:apple:shazam:*:*:*:*:*:iphone_os:*:*+ 1 more
- cpe:2.3:a:apple:shazam:*:*:*:*:*:iphone_os:*:*range: <9.25.0
- cpe:2.3:a:apple:shazam:*:*:*:*:*:android:*:*range: <12.11.0
Apple Inc./Shazam Android Appcpe-rescue
Range: unspecified
Apple Inc./Shazam iOS Appcpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

support.apple.com/HT210744nvdVendor Advisory
support.apple.com/HT210745nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000