CVE-2025-65832
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
44/100
Published: 2025-12-10
Modified: 2026-11-04
First seen: 2026-11-04
Status: active
Attack Surface
Low Complexity
No Auth
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Physical
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
None
A:
None
Description
The mobile application insecurely handles information stored within memory. By performing a memory dump on the application after a user has logged out and terminated it, Wi-Fi credentials sent during the pairing process, JWTs used for authentication, and other sensitive details can be retrieved. As a result, an attacker with physical access to the device of a victim can retrieve this information and gain unauthorized access to their home Wi-Fi network and Meatmeet account.
Weakness Classification (1)
References & Advisories (2)
Third Party Advisory
Third Party Advisory