The com.videodownload.browser.videodownloader (aka AppTool-Browser-Video All Video Downloader) application 20-30.05.24 for Android allows an attacker to execute arbitrary JavaScript code via the acr.browser.lightning.DefaultBrowserActivity component.
No PoCs from references.
- https://github.com/actuator/cve
- https://github.com/fkie-cad/nvd-json-data-feeds