CVE-2024-57062 describes a privilege escalation vulnerability in the SoundCloud iOS app version 7.65.2. A local attacker can exploit flaws in the session handling component to gain elevated privileges and obtain sensitive information. The vulnerability is classified under CWE-269 (Improper Privilege Management). The CVSS 3.1 vector indicates that the attack requires local access, high attack complexity, low privileges, and user interaction, with high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no official patch or remediation level has been disclosed.

Successful exploitation allows a local attacker to escalate privileges and access sensitive information within the SoundCloud iOS application. This can compromise user data confidentiality, integrity, and availability. The attack requires local access and user interaction, limiting remote exploitation possibilities.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid running untrusted code or apps on the device and limit local access to trusted users only.