CVE-2025-65820

critical · 9.8

An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0. An exported activity can be spawned with the mobile application which opens a hidden page. This page, which is not available through the normal flows of the application, contains several devices which can be added to your account, two of which have not been publicly released. As a result of this vulnerability, the attacker can gain insight into unreleased Meatmeet devices.

9.8

CVSS

0.5%

EPSS (exploit prob.)

40th

EPSS percentile

2025-12-10

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-200

Affected products

Vendor	Product	Affected versions
meatmeet	meatmeet	1.1.2.0

Check a specific version with /api/v1/cve/match.

References

https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-information-disclosure-md
https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Mobile-Application/Information-Disclosure.md

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-65820