CVE-2025-48930

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-48930
The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues.

2.8 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.1 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://www.wired.com/story/how-the-signal-knock-off-app-telemessage-got-hacked-in-20-minutes/
Configurations

No configuration.

History

01 Jul 2025, 20:15

Type Values Removed Values Added
Summary
  • (es) El servicio TeleMessage, hasta el 5 de mayo de 2025, almacena cierta información de texto claro en la memoria, aunque un adversario puede acceder a dicho contenido por diversas vías, como ocurrió en mayo de 2025.
Summary (en) The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues, as exploited in the wild in May 2025. (en) The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues.

28 May 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-28 17:15

Updated : 2025-07-01 20:15

NVD link : CVE-2025-48930

Mitre link : CVE-2025-48930

CVE.ORG link : CVE-2025-48930

JSON object : View

Products Affected

No product.

CWE
CWE-316

Cleartext Storage of Sensitive Information in Memory