PT-2025-50540 · Meatmeet · Meatmeet

Published 2025-12-10 · Updated 2026-01-06 · CVE-2025-65832

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Meatmeet (affected versions not specified)

Description The mobile application improperly manages sensitive information stored in memory. A memory dump of the application, following user logout and termination, can reveal Wi-Fi credentials transmitted during pairing, JWTs used for authentication, and other sensitive data. An attacker with physical access to a victim’s device could retrieve this information, potentially gaining unauthorized access to the victim’s home Wi-Fi network and Meatmeet account. The application's handling of JWTs and Wi-Fi credentials during the pairing process is a key aspect of this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-316

Related Identifiers

CVE-2025-65832

Affected Products

Meatmeet

References · 7

• https://osv.dev/vulnerability/CVE-2025-65832 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-65832 · Security Note
• https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Mobile-Application/Sensitive%20Information-Stored-in-Memory.md · Note
• https://twitter.com/CVEnew/status/2000248684811022400 · Twitter Post
• https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-sensitive-information-stored-in-memory-md · Note
• https://t.me/cveNotify/147826 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1998945721496543328 · Twitter Post