CVE-2024-31343 describes a missing authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar, affecting versions up to 4.10.1. The vulnerability allows an unauthenticated remote attacker to access protected resources or functionality due to lack of proper authorization checks. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) indicates network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, and high confidentiality impact without affecting integrity or availability.

An unauthenticated attacker can gain unauthorized access to sensitive information or functionality within the affected Sonaar Music MP3 Audio Player, potentially leading to data exposure. There is no indication of impact on data integrity or system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor vendor communications for updates. Until a patch is available, consider restricting network access to the affected application to trusted users only.