Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-20072

Mobile crash via improper validation of proto style in attachments

Description

Mattermost Mobile versions <= 2.22.0 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the mobile via crafted malicious input.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mattermost Mattermost

Default version status: unaffected

  • 0 to ≤ 2.22.0affected
  • 2.23.0unaffected

References