CVE-2024-2365

CVE-2024-2365 is a medium-severity vulnerability affecting Musicshelf versions 1.0 and 1.1 on Android, specifically within the SHA-1 Handler component's network pinning functionality. The vulnerability, categorized as "password hash with insufficient computational effort," could allow an attacker to compromise password hashes. While the attack requires physical device access and is considered difficult to exploit, a successful compromise would lead to high confidentiality impact. Despite public disclosure of the exploit, there is no evidence of active exploitation, nor are there readily available exploit modules in common frameworks, and it has garnered minimal community discussion or media attention.