CVE-2025-1558: Denial of Service Via Malicious GIF
Mattermost Mobile Apps versions <=2.25.0 fail to properly validate GIF images prior to rendering which allows a malicious user to cause the Android application to crash via message containing a maliciously crafted GIF.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1558?
CVE-2025-1558 is classified as a high severity vulnerability due to the potential for denial of service in Mattermost Mobile Apps.
How do I fix CVE-2025-1558?
To fix CVE-2025-1558, update Mattermost Mobile Apps to version 2.26.0 or later, which includes a patch for the vulnerability.
What types of devices are affected by CVE-2025-1558?
CVE-2025-1558 affects the Mattermost Mobile Apps specifically on Android devices.
Can CVE-2025-1558 be exploited remotely?
Yes, CVE-2025-1558 can be exploited remotely by sending a maliciously crafted GIF via messages in the Mattermost application.
What symptoms indicate a CVE-2025-1558 vulnerability is being exploited?
Symptoms of CVE-2025-1558 exploitation include the Mattermost Mobile App crashing when attempting to view specific GIF images.