CVE-2025-10971 - Vulnerability Details - OpenCVE

Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data. This issue affects MeetMe: through v2.2.5.

Attack Vector Local

Attack Complexity High

Privileges Required None

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact High

Subsequent System Integrity Impact High

Subsequent System Availability Impact Low

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Apple	Ios
Fermax	Meetme
Google	Android

No data.

No data.

References

Link	Providers
https://www.fermax.com/security-advisories

History

Thu, 04 Dec 2025 17:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Apple Apple ios Fermax Fermax meetme Google Google android
Vendors & Products		Apple Apple ios Fermax Fermax meetme Google Google android

Tue, 02 Dec 2025 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 02 Dec 2025 08:00:00 +0000

Type	Values Removed	Values Added
Description		Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data. This issue affects MeetMe: through v2.2.5.
Title		Insecure Storage of Sensitive Information
Weaknesses		CWE-922
References		https://www.fermax.com/security-advisories
Metrics		cvssV4_0 `{'score': 8.8, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L'}`

MITRE

Status: PUBLISHED

Assigner: FERMAX

Published: 2025-12-02T07:55:06.867Z

Updated: 2025-12-02T13:57:11.556Z

Reserved: 2025-09-25T12:13:52.534Z

Link: CVE-2025-10971

Vulnrichment

Updated: 2025-12-02T13:57:06.055Z

NVD

Status : Awaiting Analysis

Published: 2025-12-02T08:15:49.950

Modified: 2025-12-02T17:16:29.163

Link: CVE-2025-10971

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10971", "assignerOrgId": "539080bd-5750-4cce-b30b-eed9a4ef6dcc", "state": "PUBLISHED", "assignerShortName": "FERMAX", "dateReserved": "2025-09-25T12:13:52.534Z", "datePublished": "2025-12-02T07:55:06.867Z", "dateUpdated": "2025-12-02T13:57:11.556Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["iOS", "Android"], "product": "MeetMe", "vendor": "FERMAX ELECTR\u00d3NICA S.A.U", "versions": [{"lessThanOrEqual": "v2.2.5", "status": "affected", "version": "0", "versionType": "custom"}]}], "datePublic": "2025-11-12T09:05:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data. This issue affects MeetMe: through v2.2.5."}], "value": "Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data. This issue affects MeetMe: through v2.2.5."}], "impacts": [{"capecId": "CAPEC-37", "descriptions": [{"lang": "en", "value": "CAPEC-37 Retrieve Embedded Sensitive Data"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "baseScore": 8.8, "baseSeverity": "HIGH", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-922", "description": "CWE-922 Insecure Storage of Sensitive Information", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "539080bd-5750-4cce-b30b-eed9a4ef6dcc", "shortName": "FERMAX", "dateUpdated": "2025-12-02T07:55:06.867Z"}, "references": [{"url": "https://www.fermax.com/security-advisories"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The vulnerability has been fixed in the 2.2.6 version."}], "value": "The vulnerability has been fixed in the\u00a02.2.6 version."}], "source": {"discovery": "UNKNOWN"}, "title": "Insecure Storage of Sensitive Information", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-02T13:56:59.436087Z", "id": "CVE-2025-10971", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-02T13:57:11.556Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10971", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-12-02T13:56:59.436087Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-02T13:57:06.055Z"}}], "cna": {"title": "Insecure Storage of Sensitive Information", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-37", "descriptions": [{"lang": "en", "value": "CAPEC-37 Retrieve Embedded Sensitive Data"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.8, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "FERMAX ELECTR\u00d3NICA S.A.U", "product": "MeetMe", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "v2.2.5"}], "platforms": ["iOS", "Android"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "The vulnerability has been fixed in the\u00a02.2.6 version.", "supportingMedia": [{"type": "text/html", "value": "The vulnerability has been fixed in the 2.2.6 version.", "base64": false}]}], "datePublic": "2025-11-12T09:05:00.000Z", "references": [{"url": "https://www.fermax.com/security-advisories"}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data. This issue affects MeetMe: through v2.2.5.", "supportingMedia": [{"type": "text/html", "value": "Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data. This issue affects MeetMe: through v2.2.5.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-922", "description": "CWE-922 Insecure Storage of Sensitive Information"}]}], "providerMetadata": {"orgId": "539080bd-5750-4cce-b30b-eed9a4ef6dcc", "shortName": "FERMAX", "dateUpdated": "2025-12-02T07:55:06.867Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10971", "state": "PUBLISHED", "dateUpdated": "2025-12-02T13:57:11.556Z", "dateReserved": "2025-09-25T12:13:52.534Z", "assignerOrgId": "539080bd-5750-4cce-b30b-eed9a4ef6dcc", "datePublished": "2025-12-02T07:55:06.867Z", "assignerShortName": "FERMAX"}, "dataVersion": "5.2"}