Description
Mattermost Mobile Apps versions <=2.25.0 fail to properly validate GIF images prior to rendering which allows a malicious user to cause the Android application to crash via message containing a maliciously crafted GIF.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mattermost | Mattermost | ≤ 2.25.0 | 2.26.0 |
Advisories 1
- WID-SEC-2025-0428 Mattermost Mobile: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Apr 10, 2025