Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-0476

Mobile crash via file with specially crafted filename

Description

Mattermost Mobile Apps versions <=2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mattermost Mattermost

Default version status: unaffected

  • 0 to ≤ 2.22.0affected
  • 2.23.0unaffected

References