Skip to content
OpenAdvisories

Product · Meari

com.meari.sdk

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2026-33362

    Meari SDK hardcoded cryptographic keys

    In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android apps <= 1.8.x (latest observed), multiple security-critical secrets are hardcoded and shared, including API signing material, password-transport…

    Meari com.meari.sdk
  • High 7.5
    CVE-2026-33361

    Meari weak XOR obfuscation

    In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and related white-label apps (<= 1.8.x), baby monitor ".jpgx3" files use reversible XOR over only the first 1024 bytes with a predictable ke…

    Meari com.meari.sdk
  • High 7.5
    CVE-2026-33357

    Meari OpenAPI device status IDOR

    In Meari client applications embedding "com.meari.sdk" (including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label <= 1.8.x), the integrated call path to openapi-euce.mearicloud.com can be abused to retrieve WAN IP data for arbitrary…

    Meari com.meari.sdk