PT-2025-50495 · Meatmeet · Meatmeet

Published 2025-12-10 · Updated 2025-12-14 · CVE-2025-65820

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Meatmeet Android Mobile Application version 1.1.2.0

Description An exported activity within the application can be initiated, revealing a hidden page. This page displays devices, including two that have not been publicly released. An attacker can leverage this to gain knowledge of unreleased Meatmeet devices.

Recommendations Update to a newer version of the application that addresses this issue. As a temporary workaround, restrict access to the exported activity to prevent unauthorized access to the hidden page.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-65820

Affected Products

Meatmeet

References · 6

• https://osv.dev/vulnerability/CVE-2025-65820 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-65820 · Security Note
• https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Mobile-Application/Information-Disclosure.md · Note
• https://twitter.com/CVEnew/status/2000248671028617488 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1998976438213464266 · Twitter Post
• https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-information-disclosure-md · Note