CVE-2025-0476

Mattermost Mobile Apps versions =2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment...

CVE-2025-0476

creationtimestamp| type| source ---|---|--- 2025-01-15 23:51:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113835054358275669 2025-01-16 00:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsyttpy2d2s 2025-01-16 00:53:33+00:00| seen|...

CVE-2025-0476 Mobile crash via file with specially crafted filename

Mattermost Mobile Apps versions =2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment...

CVE-2025-0476

Mattermost Mobile Apps (versions <= 2.22.0) are vulnerable due to improper handling of specially crafted attachment names, which can crash the mobile app for any user who opens a channel containing such an attachment. The issue is a denial-of-service-like crash rather than data disclosure. Aff...

CVE-2025-0476 Mobile crash via file with specially crafted filename

Mattermost Mobile Apps versions =2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment...