TI-2025-40471 CVE-2025-65832 · GHSA-fj4x-vq3p-rjcf
The mobile application insecurely handles information stored within memory.
Priority LOW 20
The mobile application insecurely handles information stored within memory.
Vulnerabilities
13 records
TI-2025-40470 CVE-2025-65831 · GHSA-c8vg-3hf7-w2q5
The application uses an insecure hashing algorithm (MD5) to hash passwords.
Priority LOW 38
The application uses an insecure hashing algorithm (MD5) to hash passwords.
TI-2025-40469 CVE-2025-65830 · GHSA-524q-mw44-gx36
Due to a lack of certificate validation, all traffic from the mobile application can be…
Priority MEDIUM 47
Due to a lack of certificate validation, all traffic from the mobile application can be intercepted.
TI-2025-40468 CVE-2025-65829 · GHSA-x784-g97h-fgqv
The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to…
Priority LOW 32
The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot.
TI-2025-40467 CVE-2025-65828 · GHSA-g33w-j55r-x399
An unauthenticated attacker within proximity of the Meatmeet device can issue several…
Priority MEDIUM 62
An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devices which would result in a Denial of Service.
TI-2025-40466 CVE-2025-65827 · GHSA-hpx6-2j8w-26mq
The mobile application is configured to allow clear text traffic to all domains and…
Priority MEDIUM 41
The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP.
TI-2025-40465 CVE-2025-65826 · GHSA-9v6p-q56x-h64p
The mobile application was found to contain stored credentials for the network it was…
Priority MEDIUM 49
The mobile application was found to contain stored credentials for the network it was developed on.
TI-2025-40464 CVE-2025-65825 · GHSA-qw84-c6vv-9c44
The firmware on the basestation of the Meatmeet is not encrypted.
Priority LOW 20
The firmware on the basestation of the Meatmeet is not encrypted.
TI-2025-40463 CVE-2025-65824 · GHSA-p955-v54c-3p33
An unauthenticated attacker within proximity of the Meatmeet device can perform an…
Priority MEDIUM 41
An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bluetooth Low Energy (BLE), resulting in the firmware on the device being overwrit…
TI-2025-40462 CVE-2025-65823 · GHSA-27q6-m98q-fwm4
The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the…
Priority MEDIUM 49
The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on.
TI-2025-40461 CVE-2025-65822 · GHSA-6jw6-77q7-32wq
The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG…
Priority LOW 31
The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled.
TI-2025-40460 CVE-2025-65821 · GHSA-v8wv-p3hj-xf64
As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an…
Priority LOW 39
As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as details about the current and previous Wi-Fi…
TI-2025-40459 CVE-2025-65820 · GHSA-7vh9-wcj4-36v9
An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0.
Priority MEDIUM 49
An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0.