CVE-2024-2364

CVE-2024-2364 is a medium-severity vulnerability affecting Musicshelf versions 1.0 and 1.1 on Android, specifically within the androidmanifest.xml file's Backup Handler component. This flaw allows for the unauthorized exposure of backup files, potentially leading to data compromise. The attack requires physical device access, has low complexity, and results in high confidentiality impact. While the exploit has been publicly disclosed, there is no evidence of active exploitation, and no known exploit intelligence tools or significant community discussion exist.